state persists between users - messages leaked

[kokokenada]

Data is stored and read to session state without due consideration for the user. For example, unless the app deletes the session storage e.g. window.sessionStorage.removeItem('dialogs'); logging in as different users on the same workstation causes the wrong dialogs (and even shows the last message in the dialog). I've worked around this by tracking the dialogs in my app, but it should be fixed.

Similarly, after deleting all the dialogs on the server via the admin console, the client continued to display them. I had to manually clear session storage in the browser application tab