access/http.c: Put cookies handling in a disabled by default option, at least until cookies handling is no more a hack.