Move session recovery to the login flow.