Not sure how much of an issue this is since you are already authenticated. If it is an issue, it should probably be handled on the server side to at least return an error and possible also invalidate the session/cookie so that any further requests on the client are no longer valid. Thoughts?

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira