title: Spring RememberMe processAutoLoginCookie
body: <p>I'm using Spring Security 3.0.0 and persistent RememberMe. When the server restarts and a <strong>browser window is still open</strong>, we need to be able to continue using the application without having to login - if remember me is selected. </p>
  
  <p>I'm getting a org.springframework.security.web.authentication.rememberme.CookieTheftException: Invalid remember-me token (Series/token) mismatch. Implies previous cookie theft attack, when I try to continue to use the application after a server restart. 
  What I notice is that the processAutoLoginCookie method gets called twice. I'm not sure why. The behavior of the method itself seems to be correct, ie , update the token in the database and update the cookie in the client. </p>
  
  <p>Any help on this would be appreciated. </p>
  
  <p>Thank you.</p>