Move req.cookies warning after validating signature

fixes #62