When a user logs in via Cashtab and then leaves the WordPress site open in a browser tab for a long period, the AJAX nonce generated by WordPress expires. If the user later returns to that tab and clicks the logout button, the logout request fails with a 400 Bad Request because the stale nonce is rejected by check_ajax_referer. From the user’s perspective, nothing happens when they click logout, and the console shows errors. The issue is that nonce expiration isn’t handled gracefully on the client side, so actions taken after a long idle period fail until the page is manually refreshed.