https://www.rfc-editor.org/rfc/rfc6265#section-3
Origin servers MAY send a Set-Cookie response header with any
response. User agents MAY ignore Set-Cookie headers contained in
responses with 100-level status codes but MUST process Set-Cookie
headers contained in other responses (including responses with 400-
and 500-level status codes). An origin server can include multiple
Set-Cookie header fields in a single response.
example (using '@warren-bank/node-request-cli'):
nget --url 'http://httpbin.org/cookies/set/my_name/my_value' \
--load-cookies 'true' --save-headers --output-document '-'