Changed: Remove user_logon and user_token cookie if session::restore fails.
Changed: Use HTTP_COOKIE in $_SERVER to unset cookies if available.