backport 2.2.x: set Vary: Cookie header consistently for session#5109
Merged
backport 2.2.x: set Vary: Cookie header consistently for session#5109
Vary: Cookie header consistently for session#5109