The entry regex is expensive, of unknown value, and complicates the examples. We don't know what kind of content people will be serving with this, so this is better left as a local policy.

cleanup + fix regex so it workish. fails miserably if the clients send an empty override cookie, but enough is enough