Index: lams_central/src/java/org/lamsfoundation/lams/web/LoginRequestServlet.java
===================================================================
RCS file: /usr/local/cvsroot/lams_central/src/java/org/lamsfoundation/lams/web/LoginRequestServlet.java,v
diff -u -r1.21.2.12 -r1.21.2.13
--- lams_central/src/java/org/lamsfoundation/lams/web/LoginRequestServlet.java	5 May 2016 08:09:45 -0000	1.21.2.12
+++ lams_central/src/java/org/lamsfoundation/lams/web/LoginRequestServlet.java	2 Jun 2016 06:40:30 -0000	1.21.2.13
@@ -44,6 +44,7 @@
 import org.lamsfoundation.lams.usermanagement.dto.UserDTO;
 import org.lamsfoundation.lams.util.CentralConstants;
 import org.lamsfoundation.lams.util.WebUtil;
+import org.lamsfoundation.lams.web.session.SessionManager;
 import org.lamsfoundation.lams.web.util.AttributeNames;
 import org.springframework.web.context.support.WebApplicationContextUtils;
 
@@ -152,6 +153,9 @@
 		response.sendRedirect(response.encodeRedirectURL(url));
 		return;
 	    }
+	    
+	    // invalidate the existing session, if any
+	    SessionManager.removeSession(login, true);
 
 	    // check if there is a redirect URL parameter already
 	    String redirectURL = WebUtil.getBaseServerURL() + LoginRequestDispatcher.getRequestURL(request);