Move avoidance of setting deleted cookies into WebResponse