access/http.c: Don't double-free in cookie_append.