> Does Grails modify the JSESSIONID cookie? Any idea why this would happen?
It accesses the session from a filter which comes before the Shiro filter in the chain. I guess that's what the problem is. Unfortunately, I'm not sure I'll be able to fix that without changing Grails itself. Do you have any idea whether the Shiro filter should come after Spring's CharEncodingFilter? Or is it OK if it comes before? Cheers, Peter
