* Not use the embedded copy of vendor/cookie/ from tobi (available via npm),
  which should be packaged and depended upon.
