I have a very serious problem on my site. Once the User logs in the system does not end the session at the appointed time in “lifetime”. It is very important to me that the User has closed its session after 30 minutes of inactivity or when you close the browser.
Amazingly, when running in to the backend closed session during the period stipulated in “lifetime”, but never in the frontend.
Another strange thing that happens is that sometimes appears in front of the site that I’m logged in with another User Name. Example: my username is ASF and suddenly entering the site I’m logged in as XYZ.
Sometimes I enter the site and I’m not logged in, so I try to log in and see a blank page written: “INVALID TOKEN” I return to home and I was already logged.
http://redefix.com/Joo_helio