Its with 3.8.4 PL2 i think Johnny upgraded..
Something with the Cookie salt or whatever.
Patch stops brute force attack.