Hi a tip here.
If you have two types of users. And when you login to one, you have both unique session id set. Example __id and __backendID.
- Check your user identity and loginForm for referring to the same model
- Check your authKey, if both are null or the same this will also happen.