What do you mean by "bumping out but still logged on" ?

I made a change to have the cookie available only from HTTPS in case you log in via HTTPS.
Could it be that sometimes you are on the HTTP version of the site rather than the HTTPS version?
If you want to stay logged in for both versions, you have to log in via the HTTP version.