Upgrading from 12.1.3 to 12.2.10; getting a weird behaviour when user session times out

Hello,

We are experiencing a strange behaviour when we reach the inactivity timeout in our DEV instances (upgraded instances from 12.1.3 to 12.2.10): depending on the browser being used, the behaviour is different:

In Edge, Firefox and Chrome, I can simply bypass the re-authentication process altogether and resume working as if I had entered my password. This is a big security risk.

In Internet Explorer, I am brought back to the form but I still get a session timeout message and it asks again that I log in. After 3 attempts, I am logged out completely. Strange thing is, when the login form opens, my usrename is not defaulted as it usually would. This is highly inconvenient as we loose anything we would have been working on at that time.