User accounts cannot be used in multiple simultaneous sessions

[npearce-kpmg]

At the very least we will need to add an assumption to our submission: logging into the same account simultaneously from multiple sessions will cause Orders/Cart etc. to be shared in real time, with unknown consequences.

Possible approaches if this is a constraint we want to ease:

• Add more user accounts
• Block multiple simultaneous logins for an account
• Update API to handle multiple sessions (significant LOE)

[thechrisrobinson]

Also may need some thoughts in regards to webapp is deployed to N machines (right now two)

[robertlevy]

@thechrisrobinson ohh good point! can you make sure the load balancer is configured with session stickiness enabled?

[thechrisrobinson]

@robertlevy Yep -- Client -> WAF isn't LB -> LB (session sticky) < Docker Swarm

Let me make another issue so I do not forget.

[robertlevy]

determined that stickiness is not needed because services are stateless