Tomcat fires requestDestroyed() for every request (this is correct and in accordance with the Servlet spec). Does the IllegalStateException occur after the first request (logout) or after the second request (redirect)? Also a simplified example/test case would help.

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira