I would ```return nil``` then check and fail if cookie.nil?  in exploit()