Changed: Reimplement remove user_logon and user_token cookie if session::restore fails.