SESN0008E: A user authenticated as anonymous has attempted to access a session owned by user

SESN0008E: A user authenticated as anonymous has attempted to access a session owned by user:
Here is the WAS Log:
[1/11/13 11:39:57:546 CST] 0000023a WASSessionCor E SessionContext checkSecurity SESN0008E: A user authenticated as anonymous has attempted to access a session owned by user:PFYUDESKTOP/S-1-5-21-1628621331-4282842166-2098298398-1010.
[1/11/13 11:39:57:546 CST] 0000023a SystemOut     O EGL0731E J2EELib SessionAttr function failed with key, sessionUser. Error: SESN0008E: A user authenticated as anonymous has attempted to access a session owned by user:PFYUDESKTOP/S-1-5-21-1628621331-4282842166-2098298398-1010.
EGL0002I The error occurred in MyPro processing the main function.
[1/11/13 11:39:57:546 CST] 000001a3 webapp        E com.ibm.ws.webcontainer.webapp.WebApp logServletError SRVE0293E: [Servlet Error]-[restservices]: com.ibm.ws.webcontainer.webapp.WebAppErrorReport: SRVE0295E: Error reported: 500
at com.ibm.ws.webcontainer.webapp.WebAppDispatcherContext.sendError(WebAppDispatcherContext.java:626)
at com.ibm.ws.webcontainer.webapp.WebAppDispatcherContext.sendError(WebAppDispatcherContext.java:656)
at com.ibm.ws.webcontainer.srt.SRTServletResponse.sendError(SRTServletResponse.java:1255)
at com.ibm.ws.webcontainer.srt.SRTServletResponse.sendError(SRTServletResponse.java:1229)
at com.ibm.javart.services.RestServiceServlet.write(RestServiceServlet.java:284)
at com.ibm.javart.services.RestServiceServlet.doHttp(RestServiceServlet.java:194)
at com.ibm.javart.services.RestServiceServlet.doPost(RestServiceServlet.java:104)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:595)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:668)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1224)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:774)
at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:456)
at com.ibm.ws.webcontainer.servlet.ServletWrapperImpl.handleRequest(ServletWrapperImpl.java:178)
at com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager.java:1032)
at com.ibm.ws.webcontainer.webapp.WebApp.handleRequest(WebApp.java:3748)
at com.ibm.ws.webcontainer.webapp.WebGroup.handleRequest(WebGroup.java:304)
at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:962)
at com.ibm.ws.webcontainer.WSWebContainer.handleRequest(WSWebContainer.java:1662)
at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:195)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:459)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewRequest(HttpInboundLink.java:526)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.processRequest(HttpInboundLink.java:312)
at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.ready(HttpInboundLink.java:283)
at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.sendToDiscriminators(NewConnectionInitialReadCallback.java:214)
at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.complete(NewConnectionInitialReadCallback.java:113)
at com.ibm.ws.tcp.channel.impl.AioReadCompletionListener.futureCompleted(AioReadCompletionListener.java:165)
at com.ibm.io.async.AbstractAsyncFuture.invokeCallback(AbstractAsyncFuture.java:217)
at com.ibm.io.async.AsyncChannelFuture.fireCompletionActions(AsyncChannelFuture.java:161)
at com.ibm.io.async.AsyncFuture.completed(AsyncFuture.java:138)
at com.ibm.io.async.ResultHandler.complete(ResultHandler.java:204)
at com.ibm.io.async.ResultHandler.runEventProcessingLoop(ResultHandler.java:775)
at com.ibm.io.async.ResultHandler$2.run(ResultHandler.java:905)
at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1814)

---
From the WebSphere administrative console: 


1.Click Security > Global security > Web and SIP security to open the General settings panel. 
2.Select the Use available authentication data when an unprotected URI is accessed option. 
3.Click OK and save the change. 
4.Restart WebSphere Application Server.


---
Check the option "Use available authentication data when an
unprotected URI is accessed" under "Global security > Web and
SIP security > General settings" or add the following resources
to the web-resource-collection "Entry points" for security
contraints in the RTS web.xml:


/faces/common/*
/faces/content/*
/faces/custom/*
/faces/layouts/*
/faces/partials/*
/gwt/RSO/RSOService
/gwt/templateGenerator/TemplateGeneratorService l-pattern>
/servlet/AjaxServlet
/servlet/DownloadFileServlet


---
IBM APAR
PM47514: SESN0008E ERROR WHEN USER LOGS OUT
PM04304: "SESN0008E: SESSIONCONTEXT" ERRORS DUE TO CASE SENSITIVENESS IN USER PRINCIPLE.
PM29199: SESN0008E EXCEPTION WHEN SECURITY INTEGRATION OF SESSION IS ENABLED.
PK21769: WEB APPLICATION RECEIVES SECJ0056E/SESN0008E WHEN TRYING TO ACCESS HTTP SESSION OWNED BY SECURE USER.
PK51559: SETTING SECURITY INTEGRATION CAN LEAD TO AN ERROR SESN0008E WHEN RUNNING SESSIONPREINVOKE
PM27796: AUTHENTICATION IS FAILED DUE TO SESN0008E ERROR.
PM44303: LTPA COOKIE NOT RETURNED ON CLIENT REQUEST THAT SUCCESSFULLY AUTHENTICATES, BUT FAILS AUTHORIZATION TO A WEB REQUEST.
PM52245: AN UNAUTHORIZEDSESSIONREQUESTEXCEPTION IS THROWN FROM THE FORMLOGINEXTENSIONPROCESSOR AFTER A SUCCESSFUL LOGIN


---
Enable the fix on WebSphere Application Server (8.0.0.3+) by adding a custom session manager property. Click Application servers > server1 > Session management > Custom properties 


and add the InvalidateOnUnauthorizedSessionRequestException = true custom property.


Alternatively, if the user simply closes the browser window rather than explicitly logging out, the session eventually times out on its own.

[1/11/13 16:46:03:906 CST] 000000af SystemErr     R com.ibm.websphere.servlet.session.UnauthorizedSessionRequestException: SESN0008E: A user authenticated as anonymous has attempted to access a session owned by user:PFYUDESKTOP/S-1-5-21-1628621331-4282842166-2098298398-1010.
[1/11/13 16:46:03:906 CST] 000000af SystemErr     R at com.ibm.ws.session.SessionContext.checkSecurity(SessionContext.java:1354)
[1/11/13 16:46:03:906 CST] 000000af SystemErr     R at com.ibm.ws.session.SessionContext.isValid(SessionContext.java:873)
[1/11/13 16:46:03:906 CST] 000000af SystemErr     R at com.ibm.ws.webcontainer.srt.SRTRequestContext.getSession(SRTRequestContext.java:95)
[1/11/13 16:46:03:906 CST] 000000af SystemErr     R at com.ibm.ws.webcontainer.srt.SRTServletRequest.getSession(SRTServletRequest.java:2138)
[1/11/13 16:46:03:906 CST] 000000af SystemErr     R at com.ibm.ws.webcontainer.srt.SRTServletRequest.getSession(SRTServletRequest.java:2122)
[1/11/13 16:46:03:906 CST] 000000af SystemErr     R at test.MyThread.run(MyThread.java:12)