Only look at cookies if they are available

lib/models/access-token.js

@@ -174,6 +174,7 @@ function tokenIdForRequest(req, options) {
     }
   }
 
+  if(req.signedCookies) {
     for(i = 0, length = headers.length; i < length; i++) {
       id = req.signedCookies[cookies[i]];
 
@@ -181,6 +182,6 @@ function tokenIdForRequest(req, options) {
         return id;
       }
     }
-
+  }
   return null;
 }