Sidebar counts, marks, folder counts, etc. were keyed only on query name, not on the authenticated user. Logging in as a non-admin kept rendering the previous admin session's data because the cache was never invalidated. clearSession and adoptSession now wipe the cache so each identity starts fresh. User-observed: the "test" user (role guest, BasePath="") saw the admin library counts in the left sidebar after signing in.