When a user logout and then login another user, the reverseproxy auth should be checked before session otherwise the old user is still login.