Send cookie to client after authenticated by APM

we've an IRule like this:

when ACCESS_ACL_ALLOWED {
   set user [ACCESS::session data get "session.logon.last.username"]
}
when HTTP_REQUEST_RELEASE {
               HTTP::header insert "X-Forwarded-User" $user
}
when HTTP_RESPONSE_RELEASE {
    log local0. "[HTTP::status] [HTTP::header "Location"]"
}

so maybe you can change this to your needs, for example instead of "header insert" "cookie insert"

when ACCESS_ACL_ALLOWED

is when the Client is authenticated