AF Cookie should be reused within the context of same request.

Also adding some more functional tests for af.
because we do validation post deserialize, and if the validation is successful we store the value.