sounds like they may be going to:
http://yoursite.tld/When you have your full url set to:
http://www.yoursite.tld/And running into a cross domain cookie issue. theres a solution for apache users in the faq forum that show you how to only allow one domain to access your site (and redirect the other)