Core: fix empty cookie values (#625).

If the browser sends a (non-DM) cookie with an empty value a proper ClientState object is created. No exception is thrown.

Thanks, Patricia, for reporting!

Close #625