This message was deleted.

I found a working expression 🙂 Added HTTP.RES.SET_COOKIE.COOKIE("mycookie").VALUE(0) as "Attribute 1" to the WebAuth Action which than can be used in a Rewrite Action using AAA.USER.ATTRIBUTE(1) to insert a Set-Cookie Header with the correct value 🙂