Fix #30 Disallow getting cookies from javascript. User logged in can be gotten from /users/userData.