Out of the box, varnishd does not cache a response with a cookie, nor does it honor the Cache-Control directives private and no-cache.