Don't crash on req w/o cookies (redir to login)

When handling a request without cookies, i.e., with
`typeof req.headers.cookie === 'undefined', detect the problem and redirect to
login rather than crashing.
Fixes #76.