Request#getCookies may return null, so check for that