Parse copied Set-Cookie response headers and build a security-conscious cookie header without accessing your browser cookies or contacting an origin.