Don't override existing cookie

Bad servers return multiple PHPSESSIDs and you should take the first one not the last one.