404 error from static assets returning with set-cookie

[danelowe]

From observation so far; if a static assets (e.g. image) is not available, the VCL will ensure the cookie is removed from the request, but Magento will render a 404, which will include the set-cooke header. The frontend cookie will have a different session id since it was removed from the request.

The outcome is that the session id changes between requests if there is a 404 response from magento.