fix expired and set-cookie