Last modified: 2008-06-18 13:22:46 UTC
The centralauth_Session cookie is assigned an explicit expiration time 24 hours in the future. Thus, it does not get cleared as expected when the user closes their browser.
Fixed in r36377.