The centralauth_Session cookie is assigned an explicit expiration time 24 hours in the future. Thus, it does not get cleared as expected when the user closes their browser.

Version: unspecified
Severity: normal