Would it be better to use the Set-Cookie header? - View it on GitHub