NPE when empty Set-Cookie header in response, fix #2361