code: static MultiMap removeCookieHeaders(MultiMap headers) {
      // We don't want to remove the JSESSION cookie.
      String cookieHeader = headers.get(COOKIE);
      if (cookieHeader != null) {
        headers.remove(COOKIE);
        Set<Cookie> nettyCookies = ServerCookieDecoder.STRICT.decode(cookieHeader);
        for (Cookie cookie: nettyCookies) {
          if (cookie.name().equals("JSESSIONID")) {
            headers.add(COOKIE, ServerCookieEncoder.STRICT.encode(cookie));
            break;
          }
        }
      }
      return headers;
    }
docs: Authorisation