fixed bug #824791: Session not invalidated upon re-authentication

diff --git a/HISTORY b/HISTORY
index b38ac1d..8dd0fbc 100644 (file)
--- a/HISTORY
+++ b/HISTORY
@@ -1,6 +1,6 @@
-$Id: HISTORY,v 1.19 2003/10/25 08:12:20 maxcooper Exp $
-$Revision: 1.19 $
-$Date: 2003/10/25 08:12:20 $
+$Id: HISTORY,v 1.20 2003/10/25 10:50:18 maxcooper Exp $
+$Revision: 1.20 $
+$Date: 2003/10/25 10:50:18 $
 
 
 Security Filter v@PROJECT.VERSION@
@@ -16,6 +16,9 @@ Changes since last release:
 ===========================
 * SecurityFilter no longer looks for the DTD if validation of the config file is disabled.
 
+* Session is now invalidated if the user spontaneously logs in again as a different user.
+The session is kept if they login as the same user.
+
 
 Release 1.1-b1, 2003-Jul-15
 ===========================