This resolves ENG-5410.
The version of callServerEndpoint that resolveInvalidatedCookie gets passed is defined here. Instead of trying to dispatch a recovery attempt when it sees a session change that invalidates its cookie, this version of callServerEndpoint ignores the session change.
That solves the "double resolution" issue. It's also the right thing to use here... this overriden callServerEndpoint is used by the logIn action, and should be used by all other actions during the recovery attempt.
Depends on D9584