We are running version 3.7 and are seeing an odd bug. Occasionally (more often than not) when you attempt to logout of the website, it's not removing the session NOPCOMMERCE.AUTH cookie. The current behavior is not something that I'd consider normal. Website: https://accessories.lazydays.com/
I've found that (sometimes) you can login then logout, but if you log in again it will not let you logout again until you clear your cache. I've also seen that clearing the cache doesn't always solve the issue. We're not load balanced, and I've added a machineKey to the config, but that didn't solve the issue either.
Any help with this issue would be greatly appreciated.
Thank you!