This is on EE 2.10.1.
Website Sessions are set to Cookie Only.
$config['sess_expiration'] = 1440; $config['sess_expire_on_close'] = TRUE;
User logs in, cookie is set. User closes browser and opens again and finds that the cookie has not been cleared and so they are still logged in.
How can we enforce session cookies to expire when the session ends?