id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
21608	Logged out sessions are resurrected by concurrent requests	Jonas Borgström	nobody	"1. User logs in
2. User loads a slow page in separate tab or as an ajax request
3. User logs out before request in step 2 completes. This will delete the session from the db

== Expected behavior ==

User/session stays logged out since the user explicitly logged out and the session row was delete in step 3.

== Actual behavior ==

The previously deleted session is re-inserted into the database when the request from step 2 completes. So the previously logged out user is now logged in again.
"	Bug	new	contrib.sessions	1.4	Normal				Unreviewed	0	0	0	0	0	0