Only broadcast tokenAuth events after cookie manipulation.