statement instead of "Response.setCookie"

to get around limitations in stock python.

The previous non-standard machinery didn't like
error instances.

where manage_workspace is a reserved method that dispatches to the
default management interface which is the first interface defined
in manage_options.

got rid of bogus manage_options entries.