cookie rewrite: remove max-age, add test