Actually very easy. I would consider this a PHPBB bug IMO. They dont clear out old session keys. Whenever you update a session you should always clear it so you dont have multiple sessions but easy enough to counter.
In phpbb2.php find this line and add the bold text
Content visible to verified customers only.