Seems like a caching issue? Happens intermittently. Andy thought that changing the Scoped connection in s/security.cpp to a ScopedInternal connection would fix it, not sure if it does or not.

I attached a file that reproduces it but the file has a ton of cruft that I couldn't get rid of without it not reproducing it anymore (stupid stuff like code that isn't even called before the exception).

The important part that isn't working is basically in the getUser function: it does an addUser and then and auth on the user that was just added and it doesn't work.