@james.heggs we are in the process of refactoring our session and state management to enable new features, and a validation done to improve the SSO experience had a bug. Since you were not logging out the user from auth0 (just deleting the state of your app), the user was being logged in automatically because of SSO.
You should be good to go now. Let me know if that is not the case!