Merge pull request #6726 from opf/fix/28579/reset-session-before-login

[28579] Ensure resetting the session before forwarding to login

app/controllers/application_controller.rb

@@ -245,6 +245,10 @@ class ApplicationController < ActionController::Base
 
   def require_login
     unless User.current.logged?
+
+      # Ensure we reset the session to terminate any old session objects
+      reset_session
+
       respond_to do |format|
         format.any(:html, :atom) do redirect_to signin_path(back_url: login_back_url) end