Bugfixes core: preserve incoming set cookies (#6029) (2875b49) next: correctly bundle next-auth/middleware fixes #6025 (5259d24)