ssage: set-cookie header may not be modified via header actions
  rule: self.lowerAscii() != 'set-cookie'
ú