Fix cookie creation logic

Switch to always returning an array (even if empty) when checking a
user's metro IDs.