Allow changing the Cookie class

Allow changing the Cookie class used by Cookies; otherwise, you cannot configure the parsers and validators to use in Cookies.

In the past I used to monkey-patch the Cookie class, which is less than ideal.