I\'m using Tomcat 6.2 and Spring MVC 2.5. I\'ve noticed that, whilst a user is logged in I can restart Tomcat and the user is able to continue browsing without re-authentica
Try this configuration:
...