User bypassing auth

[Chris Misztur]

I have one user who is able to close the browser (tried Chrome and FF), and 
evening reboot his PC, go to Guac URL and is allowed back in without auth.  I 
have it set up for LDAP and TOTP.  

Is something getting cached server side?

Chris