allowing cookie to be null