user: Wrap cookie parsing in try...catch

As reported by one of our users, parsing the cookie can throw an
error on `user.load`. Instead, we generate a new user if the
cookie is malformed.