    # File lib/merb-core/dispatch/cookies.rb, line 70
        def extract_headers(controller_defaults = {})
          defaults = @_cookie_defaults.merge(controller_defaults)
          cookies = []
          self.each do |name, value|
            # Only set cookies that marked for inclusion in the response header.
            next unless @_options_lookup[name]
            options = defaults.merge(@_options_lookup[name])
            if (expiry = options["expires"]).respond_to?(:gmtime)
              options["expires"] = expiry.gmtime.strftime(Merb::Const::COOKIE_EXPIRATION_FORMAT)
            end
            secure  = options.delete("secure")
            http_only = options.delete("http_only")
            kookie  = "#{name}=#{Merb::Parse.escape(value)}; "
            # WebKit in particular doens't like empty cookie options - skip them.
            options.each { |k, v| kookie << "#{k}=#{v}; " unless v.blank? }
            kookie  << 'secure; ' if secure
            kookie  << 'HttpOnly; ' if http_only
            cookies << kookie.rstrip
          end
          cookies.empty? ? {} : { 'Set-Cookie' => cookies.join(Merb::Const::NEWLINE) }
        end