Currently, calling `res.cookies.set` in middleware replaces any cookies set by an API route. Instead they should be merged. e2e test: `skip-trailing-slash-redirect`