Fire `user_loaded_from_cookie` even if token loader provided