Make permissive headers more similar to mastodon instance

daemon.py

@@ -686,7 +686,9 @@ class PubServer(BaseHTTPRequestHandler):
         self.send_header('Content-type', fileFormat)
         if length > -1:
             self.send_header('Content-Length', str(length))
-        if cookie and not permissive:
+        if permissive:
+            return
+        if cookie:
             cookieStr = cookie
             if 'HttpOnly;' not in cookieStr:
                 if self.server.httpPrefix == 'https':