Hi,

I'm using eXist, compiled from the svn version 18685. While trying to do a number of tasks in the eXist app suite (including xar install, and browsing the function documentation app), I've gotten the attached error. In all cases, I was logged in as admin (either in order to attempt to install a package or to regenerate function documentation).

(I did remap /exist to / in jetty.conf ; I'm not sure if that has any import for this error.)

Any ideas where this might be coming from?

Thanks,
Efraim 

HTTP ERROR 500

Problem accessing /apps/fundocs/browse.html. Reason:

    exerr:ERROR Token mismatch. This may indicate an out-of-sequence request (likely) or a cookie theft attack.  Session is deleted for security reasons. [at line 63, column 60, source: jar:file:/usr/local/opensiddur/lib/extensions/exist-modules.jar!/org/exist/xquery/modules/persistentlogin/login.xql]
In function:
	login:get-credentials(xs:string, xs:string?, xs:string, xs:boolean) [63:60:jar:file:/usr/local/opensiddur/lib/extensions/exist-modules.jar!/org/exist/xquery/modules/persistentlogin/login.xql]
	login:set-user(xs:string, xs:string?, xs:dayTimeDuration?, xs:boolean) [73:5:jar:file:/usr/local/opensiddur/lib/extensions/exist-modules.jar!/org/exist/xquery/modules/persistentlogin/login.xql]
	login:set-user(xs:string, xs:dayTimeDuration?, xs:boolean) [38:22:jar:file:/usr/local/opensiddur/lib/extensions/exist-modules.jar!/org/exist/xquery/modules/persistentlogin/login.xql]

Caused by:

org.exist.xquery.XPathException: exerr:ERROR Token mismatch. This may indicate an out-of-sequence request (likely) or a cookie theft attack.  Session is deleted for security reasons. [at line 63, column 60, source: jar:file:/usr/local/opensiddur/lib/extensions/exist-modules.jar!/org/exist/xquery/modules/persistentlogin/login.xql]
In function:
	login:get-credentials(xs:string, xs:string?, xs:string, xs:boolean) [63:60:jar:file:/usr/local/opensiddur/lib/extensions/exist-modules.jar!/org/exist/xquery/modules/persistentlogin/login.xql]
	login:set-user(xs:string, xs:string?, xs:dayTimeDuration?, xs:boolean) [73:5:jar:file:/usr/local/opensiddur/lib/extensions/exist-modules.jar!/org/exist/xquery/modules/persistentlogin/login.xql]
	login:set-user(xs:string, xs:dayTimeDuration?, xs:boolean) [38:22:jar:file:/usr/local/opensiddur/lib/extensions/exist-modules.jar!/org/exist/xquery/modules/persistentlogin/login.xql]
	at org.exist.xquery.modules.persistentlogin.PersistentLogin.lookup(PersistentLogin.java:96)
	at org.exist.xquery.modules.persistentlogin.PersistentLoginFunctions.authenticate(PersistentLoginFunctions.java:104)
	at org.exist.xquery.modules.persistentlogin.PersistentLoginFunctions.eval(PersistentLoginFunctions.java:88)
	at org.exist.xquery.BasicFunction.eval(BasicFunction.java:70)
	at org.exist.xquery.InternalFunctionCall.eval(InternalFunctionCall.java:55)
	at org.exist.xquery.UserDefinedFunction.eval(UserDefinedFunction.java:153)
	at org.exist.xquery.DynamicCardinalityCheck.eval(DynamicCardinalityCheck.java:74)
	at org.exist.xquery.DynamicTypeCheck.eval(DynamicTypeCheck.java:61)
	at org.exist.xquery.FunctionCall.evalFunction(FunctionCall.java:327)
	at org.exist.xquery.FunctionCall.eval(FunctionCall.java:232)
	at org.exist.xquery.ConditionalExpression.eval(ConditionalExpression.java:100)
	at org.exist.xquery.DebuggableExpression.eval(DebuggableExpression.java:58)
	at org.exist.xquery.ConditionalExpression.eval(ConditionalExpression.java:102)
	at org.exist.xquery.DebuggableExpression.eval(DebuggableExpression.java:58)
	at org.exist.xquery.ConditionalExpression.eval(ConditionalExpression.java:102)
	at org.exist.xquery.DebuggableExpression.eval(DebuggableExpression.java:58)
	at org.exist.xquery.DebuggableExpression.eval(DebuggableExpression.java:65)
	at org.exist.xquery.LetExpr.eval(LetExpr.java:189)
	at org.exist.xquery.LetExpr.eval(LetExpr.java:187)
	at org.exist.xquery.LetExpr.eval(LetExpr.java:187)
	at org.exist.xquery.LetExpr.eval(LetExpr.java:187)
	at org.exist.xquery.LetExpr.eval(LetExpr.java:187)
	at org.exist.xquery.LetExpr.eval(LetExpr.java:187)
	at org.exist.xquery.BindingExpression.eval(BindingExpression.java:164)
	at org.exist.xquery.UserDefinedFunction.eval(UserDefinedFunction.java:153)
	at org.exist.xquery.DynamicCardinalityCheck.eval(DynamicCardinalityCheck.java:74)
	at org.exist.xquery.DynamicTypeCheck.eval(DynamicTypeCheck.java:61)
	at org.exist.xquery.FunctionCall.evalFunction(FunctionCall.java:327)
	at org.exist.xquery.FunctionCall.eval(FunctionCall.java:232)
	at org.exist.xquery.UserDefinedFunction.eval(UserDefinedFunction.java:153)
	at org.exist.xquery.DynamicCardinalityCheck.eval(DynamicCardinalityCheck.java:74)
	at org.exist.xquery.DynamicTypeCheck.eval(DynamicTypeCheck.java:61)
	at org.exist.xquery.FunctionCall.evalFunction(FunctionCall.java:327)
	at org.exist.xquery.FunctionCall.eval(FunctionCall.java:232)
	at org.exist.xquery.LetExpr.eval(LetExpr.java:142)
	at org.exist.xquery.BindingExpression.eval(BindingExpression.java:164)
	at org.exist.xquery.ConditionalExpression.eval(ConditionalExpression.java:100)
	at org.exist.xquery.DebuggableExpression.eval(DebuggableExpression.java:58)
	at org.exist.xquery.ConditionalExpression.eval(ConditionalExpression.java:102)
	at org.exist.xquery.DebuggableExpression.eval(DebuggableExpression.java:58)
	at org.exist.xquery.ConditionalExpression.eval(ConditionalExpression.java:102)
	at org.exist.xquery.DebuggableExpression.eval(DebuggableExpression.java:58)
	at org.exist.xquery.ConditionalExpression.eval(ConditionalExpression.java:102)
	at org.exist.xquery.AbstractExpression.eval(AbstractExpression.java:71)
	at org.exist.xquery.PathExpr.eval(PathExpr.java:264)
	at org.exist.xquery.AbstractExpression.eval(AbstractExpression.java:71)
	at org.exist.xquery.XQuery.execute(XQuery.java:267)
	at org.exist.xquery.XQuery.execute(XQuery.java:214)
	at org.exist.http.urlrewrite.XQueryURLRewrite.runQuery(XQueryURLRewrite.java:701)
	at org.exist.http.urlrewrite.XQueryURLRewrite.service(XQueryURLRewrite.java:236)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:848)
	at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:669)
	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1448)
	at de.betterform.agent.web.filter.XFormsFilter.doFilter(Unknown Source)
	at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1419)
	at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:455)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137)
	at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:533)
	at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231)
	at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1075)
	at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:384)
	at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193)
	at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1009)
	at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135)
	at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:154)
	at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116)
	at org.eclipse.jetty.server.Server.handle(Server.java:368)
	at org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:488)
	at org.eclipse.jetty.server.AbstractHttpConnection.headerComplete(AbstractHttpConnection.java:932)
	at org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.headerComplete(AbstractHttpConnection.java:994)
	at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:640)
	at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:235)
	at org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82)
	at org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:628)
	at org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:52)
	at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:608)
	at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:543)
	at java.lang.Thread.run(Thread.java:722)