KemalIdentity::Sessions::Restored

A remembered login was restored: a session exists again, and the remember cookie has rotated.

Both tokens must reach the browser. Writing one cookie and not the other leaves the client holding a remember token the server has already spent, which the next request reports as a replay — the user is signed out and told their cookie may have been stolen, because of a bug rather than a thief.