FWIW, I didn't get what I aimed for done by the end of the day. Instead I implemented an rfc3339 module and tests. The cookie stuff is on its way. Good enough to feel good about. :)