included cookie setting headers in header response test