Correctly handle invalid cookies

Fixes https://github.com/tornadoweb/tornado/issues/633
Monkey-patching a private method seems like a bad idea; I think I'd rather have a new cookie parser written from scratch than to hack around the Cookie module's limitations like this.