Spotfire CustomAuthenticator invoke for every request

[Deepika Davuluri]

I am using Spotfire(10.0.0) CustomAuthentication for authenticating a user. From docs, It is mentioned that custom authenticator is not invoked for every request. The same happens in my current application. When session for userA has been created in other application and userA has logged out and a new user userB has logged in, the old session is being used instead of creating new one.

1. Can anyone help me in understanding the session creation and invalidation

2. Do I need to change the authentication scheme in order to create session for every request

3. Can anyone explain how logout works in spotfire

4. Can we create a custom endpoint in spotfire for logging out the user