Order cookies in response header

Taking a stab at this one.