Index: openacs-4/packages/acs-authentication/tcl/local-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/acs-authentication/tcl/local-procs.tcl,v
diff -u -r1.16 -r1.17
--- openacs-4/packages/acs-authentication/tcl/local-procs.tcl	24 Sep 2003 17:22:54 -0000	1.16
+++ openacs-4/packages/acs-authentication/tcl/local-procs.tcl	25 Sep 2003 12:48:35 -0000	1.17
@@ -243,9 +243,8 @@
         return [array get result]
     }
 
-    # Invalidate existing login tokens
-    # TODO: We probably need to re-cookie the user, then ...
-    # sec_change_user_auth_token $user_id
+    # Invalidate existing login tokens sitting on random other browsers, just in case
+    sec_change_user_auth_token $user_id
 
     set result(password_status) "ok"