Double DRUPAL_UID and then "Access denied" in node/add/X page when logged in with boost and cacherouter

Scenario 1:

* Log out
* Request /node/add/newsitem, and get Access denied message (as expected)
* Click on "Log in", URL = /user/login?destination=node%2Fadd%2Fnewsitem
* Log in succeeds (I see Welcome John Smith), but URL is still /user/login?destination=node%2Fadd%2Fnewsitem

Looks like I am being redirected to /user/login and getting access denied since I am already logged in. HOWEVER, if I go back to /node/add/newsitem I get Access denied again, AND it no longer says "Welcome John Smith") there is no mention of boost cache in the page source, but it seems to be from cache (since I have a debug in my page.tpl.php which prints out the UID and that is blank).

Strangely, going to /node/add/audio works fine!

For some reason Boost is setting TWO DRUPAL_UID's to my cookies. I get this from FF Live HTTP headers:

http://www.constitutionnet.org/user/login?destination=node%2Fadd%2Fnewsitem

POST /user/login?destination=node%2Fadd%2Fnewsitem HTTP/1.1
Host: www.constitutionnet.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.17) Gecko/20110420 Firefox/3.6.17 GTB7.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en,es-mx;q=0.9,en-au;q=0.7,ja;q=0.6,sv;q=0.4,es;q=0.3,fr;q=0.1
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.constitutionnet.org/user/login?destination=node%2Fadd%2Fnewsitem
Cookie: SESScaa7817292a56d4077bb75572c75ab54=etf4bfued2e2mtmd4sqp7df640; has_js=1; __utma=209885447.1464510012.1304510474.1304510474.1304510474.1; __utmb=209885447.2.10.1304510474; __utmc=209885447; __utmz=209885447.1304510474.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); cStates=
Content-Type: application/x-www-form-urlencoded
Content-Length: 126
name=test%40transmachina.net&pass=sprawkrocks&form_build_id=form-f4988cc0659db7b328335d40e1e0b7d5&form_id=user_login&op=Log+in
HTTP/1.1 302 Found
Date: Wed, 04 May 2011 12:01:46 GMT
Server: Apache
X-Powered-By: PHP/5.2.6
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Last-Modified: Wed, 04 May 2011 12:01:46 GMT
Cache-Control: store, no-cache, must-revalidate, post-check=0, pre-check=0
Set-Cookie: SESScaa7817292a56d4077bb75572c75ab54=deleted; expires=Tue, 04-May-2010 12:01:45 GMT; path=/
Set-Cookie: SESScaa7817292a56d4077bb75572c75ab54=flt20qrtukakhnlmheb7d6f5m4; expires=Fri, 27 May 2011 15:35:06 GMT; path=/; domain=www.constitutionnet.org
Set-Cookie: DRUPAL_UID=8; expires=Fri, 27-May-2011 15:35:06 GMT; path=/; domain=www.constitutionnet.org
Set-Cookie: DRUPAL_UID=1; expires=Fri, 03-Jun-2011 12:01:46 GMT; path=/
Location: http://www.constitutionnet.org/node/add/newsitem
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 20
Keep-Alive: timeout=10, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
----------------------------------------------------------

and then later:

----------------------------------------------------------
http://www.constitutionnet.org/node/add/newsitem

GET /node/add/newsitem HTTP/1.1
Host: www.constitutionnet.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.17) Gecko/20110420 Firefox/3.6.17 GTB7.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en,es-mx;q=0.9,en-au;q=0.7,ja;q=0.6,sv;q=0.4,es;q=0.3,fr;q=0.1
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.constitutionnet.org/user/login?destination=node%2Fadd%2Fnewsitem
Cookie: SESScaa7817292a56d4077bb75572c75ab54=flt20qrtukakhnlmheb7d6f5m4; has_js=1; __utma=209885447.1464510012.1304510474.1304510474.1304510474.1; __utmb=209885447.2.10.1304510474; __utmc=209885447; __utmz=209885447.1304510474.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); cStates=; DRUPAL_UID=8; DRUPAL_UID=1

HTTP/1.1 403 Forbidden
Date: Wed, 04 May 2011 12:01:46 GMT
Server: Apache
X-Powered-By: PHP/5.2.6
Expires: Sun, 19 Nov 1978 05:00:00 GMT
Cache-Control: must-revalidate
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5319
Keep-Alive: timeout=10, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=utf-8
----------------------------------------------------------

It's possible that there is a permission problem somewhere blocking this user (uid=8) from create new newsitem nodes, but still the Boost behavior (i.e. no Boost tag and showing a cached page) is wrong, yes?