@height8 I think I've seen the behavior you're talking about. The difference there is "active session" versus "new session." Of course if we're being "paranoid" secure, we should cut off the active session as well. :P

//