handle malformed set-cookie header #30