Look into incompatibilities between the cookie identity resolver and cookie service override

[ollieread]

There are potential incompatibilities between the cookie identity resolver and the cookie service override. I suspect that forcing the tenant cookie to exist outside the tenant-aware cookies is the best way to do this.

[ollieread]

For now, I'm throwing a compatibility exception, so I've moved this to low priority and removed it from the v1 milestone.