Unsign the cookie value.
The signed value.
Secret for unsigning (must be strong, see isSignableCookieSecret).
If the value is not a signed string or the secret is weak/empty.
Unsign the cookie value.