Enable concise syntax of response.cookie(...flagBag.cookie)

[dferber90]

This originally existed on an unreleased branch in 77bfb6f but had to be removed as a TypeScript warning appeared on the calling side of response.cookie(...flagBag.cookie):

A spread argument must either have a tuple type or be passed to a rest parameter.

The code works, but I could not figure out the correct type.

Reintroducing this would allow developers to use response.cookie(...flagBag.cookie) instead of response.cookie(...flagBag.cookie.args).

[dferber90]

flagBag.setCookie(response) would be a nicer way of handling this. Then we can drop flagBag.cookie.args.