The current implementation of the FishEye filter still require that the Remember Me cookie have the encrypted credentials for the user, what is no longer true as that pose a major security vulnerability.
The filter should rely on the JIRA Remember Me funcionality.
If the user logged in using the Remember Me feature, closes its browser and comes back directly to a FECRU URL it will be presented with the FECRU login page instead of automatically logging in and showing the actual URL content.