Critical Description
AFAIK, shindig switched to http-comps as the http library.
This library by default just like a browser caches the cookies returned by the backend servers and re-uses those cookies all the time.
Attached patch resolves the issues by rejecting validation of cookies with a custom cookie policy.
Regards,
Hasan Ceylan