@Groovy Duke found it. I had enabled peristent tomcat sessions to avoid having to login again on every restart. Removing it worked as expected. It may be worth keeping persistent sesisons only for the development environment as a default. Thank you for your support