Cookie names are not unique, and multiple cookies with the same name are quite valid, given they have different paths or domains. Browsers generally handle this correctly and send back all cookies - it is the job of the server app to specify domain or path if they want to avoid duplicate cookies.