sets cache private when cookies set. Closes #1241