rfc2109: allow nil to be passed to safe-parse-cookies
The docs say that you can pass nil to safe-parse-cookies to have no
legal domains to allow cookies to come from (ie they must come from your
server or not at all).
Whoops.
darcs-hash:a18e1d6748baa7fcc2a2a23d8c7f8b2f31e7bc88