Allow setting cookie in response

Resolves #4