Hi, In trunk I added libraries/session_cleanup.lib.php. For the moment it only does unset($_SESSION['navi_limit_offset']);
and is called at logout time for http and cookie auth_type. The idea is to get rid of choices made by the previous user.
If you remember of other variables set in the session as a result of a choice from a user, please add them there.
Or should we just destroy the session at logout time? I was not brave enough to test this...
Marc