Provide guidance for Set-Cookie

The Set-Cookie response header breaks the normal rules for
headers with multiple values and requires special handling.