I have disabled all the tracking security for my own domain, and refreshing doesn't log me out. Are you using SSO or a local account?