Revert "prevent failures when session cookie is malformed"