Fires if a bad authentication cookie hash is encountered.
Parameters
$cookie_elementsstring[]
{ Authentication cookie components. None of the components should be assumed to be valid as they come directly from a client-provided cookie value. @type string $username User's username. @type string $expiration The time the cookie expires as a UNIX timestamp. @type string $token User's session token used. @type string $hmac The security hash for the cookie. @type string $scheme The cookie scheme to use.}