add customizable `always_ridicule` value, and cookie setting endpoint

We should only display the input field if a non-default cookie value is specified though.