title: Invalid remember-me token (Series/token) mismatch. Implies previous cookie theft attack
body: <pre><code>org.springframework.security.web.authentication.rememberme.CookieTheftException: Invalid remember-me token (Series/token) mismatch. Implies previous cookie theft attack.
      at org.springframework.security.web.authentication.rememberme.PersistentTokenBasedRememberMeServices.processAutoLoginCookie(PersistentTokenBasedRememberMeServices.java:102)
      at org.springframework.security.web.authentication.rememberme.AbstractRememberMeServices.autoLogin(AbstractRememberMeServices.java:115)
  </code></pre>
  
  <p>What I notice is that the <code>processAutoLoginCookie</code> method gets called twice. The behavior of the method itself seems to be correct, for example , update the token in the database and update the cookie in the client.
  Any help on this would be appreciated.</p>