Fix exception when session cookie is not present

We can skip the session retrieval and just set current_user to nil when
the session cookie is blank