Design/Logic Flaw

Jenkins CAS Plugin 1.6.2 and earlier does not invalidate the previous session on login...