Switch to vmod_header for the ZeroOpts=tls cookie

This also fixes numerous smaller issues with the original
  tls cookie code being replaced :)

Change-Id: Ic7ca4fc348fa4c4737ceae531a2a54189a795e9e