bugfix: nil cookie now returns nil