Users are alerted that their password expired for no reason, and get stuck in a loop where they keep getting that message

[yuvaltobias]

I've been trying to hunt this down for a while, as it happens intermittently, but the last time I got it, the session contained the following:

warden.user.user.session:
  ...
  password_expired: true
  :password_expired: false
  ...

Maybe it's this line?
https://github.com/phatworx/devise_security_extension/blob/master/lib/devise_security_extension/controllers/helpers.rb#L41

[kkchu791]

any updates on this issue?