strange combination of "Set-Cookie" and interleaved pattern of True/False like responses can result in bypassing of the ABAB test