Don't set cookies on every response. Fixes #32