server: dont inject user from cookie, or if from Kik
Merge pull request #136 from claydotio/server-inject

server: dont inject user from cookie, or if from Kik