request.getCookies() may return null