I used the NPM cookie-parser middleware that used to come as part of Express:

npm install cookie-parser

Be careful when rolling your own cookie parsing instead of using the cookie-parser middleware module.

I had an = in one of my cookie values that remained encoded as a %3d value.

The cookie-parser module correctly decoded this for me.