cookie extraction from LoginResponse