I see auth error on re-login after update from 16.09 to 17.09. I use BOSH and auth_method: anonymous.
Can login again only after restarting ejabberd.
[info] <0.1594.0>@ejabberd_c2s:handle_auth_success:436 (http_bind|ejabberd_bosh) Accepted c2s PLAIN authentication for by anonymous backend from 1.1.1.1
[info] <0.1594.0>@ejabberd_c2s:bind:407 (http_bind|ejabberd_bosh) Opened c2s session for user1@domain.com/9437279846333418302977[info] <0.1598.0>@ejabberd_c2s:handle_auth_failure:446 (http_bind|ejabberd_bosh) Failed c2s PLAIN authentication for from 1.1.1.1: Invalid username or password
[info] <0.1594.0>@ejabberd_c2s:process_terminated:272 (http_bind|ejabberd_bosh) Closing c2s session for user1@domain.com/9437279846333418302977: Connection failed: connection closed