I think I might have solved our issues with multiple sessions?  Some of the methods in UserDAO weren't closing the sessions including, but not limited to, login.