Visit statistics fail to track real visits

When enabling statistics, stored visits have at most one request recorded. This is caused by the fact that the code that is supposed to add the visit identifier cookie is executed after the response is fully written and closed, thus the visit cookie is never actually sent to the client.