Fix WEB-151 - tolerate missing user cookie attribute in challenge stage2