If I close my Browser (firefox 3) while i'm logged in the End-User-Portal and then start it again (1 Hour later), the session is still active. I was not prompted for a username and password.
I was directly logged in a the last user.
Possible security issue, isn't it?