When writing the response (before writing any content):
When reading a subsequent request:
Note that I'm not sure what guarantees are made (if any) that cookies will be returned in the order they were added. You may need to use Cookie.getName() to validate this. For further info read the API docs.