Extract a user id from just the cookie, without CSRF token validation. This is less secure than
extractUserIdFromRequestHeaders as a result. This should only be used in rare
circumstances where you cannot rely on client-side JavaScript to insert the CSRF token.
Extract a user id from just the cookie, without CSRF token validation. This is less secure than extractUserIdFromRequestHeaders as a result. This should only be used in rare circumstances where you cannot rely on client-side JavaScript to insert the CSRF token.