return null when no signin cookie