xhr set cookie, no gif