add Set-Cookie in response header

Now the client can receive cookie.