Manage `Set-Cookie` headers

[over-engineer]

Expanding on #43, we should look into implementing a mechanism to conditionally block Set-Cookie HTTP headers.

This is going to prevent cookies from being set via the setcookie() function.

(cc: @formaciongrafica)