Allow setting cookie in response