I'm in a hurry. Auth cookie is shared between browser instances and customer complains. Tried RA-Session but it fails!!!

[eluser]xwero[/eluser]
A possible scenario will be one person is on the site and a friend is with him/her and the friend needs access to his/her profile so they change places.
The problem with this scenario and your clients request is that the first person will not be able to change things with his profile.

If the user is so careless to not log off and leaves the browser open on a public computer it's his responsibility. If people write their pin code on their bankcard and it gets lost the banks are not liable.