Why is req.cookies.token showing up as undefined in my /users/current route, even though I'm sending credentials and setting cookies?