Can't overlap headers or we'll break multiple Set-Cookies.