Rails Ruby on Rails

Let's say i have to set the user's timezone in Time.zone when the user visit the site, but when an anonymous user comes, the timezone of the last user is still stored in Time class. So now i have to reset the Time.zone in every session in production mode. Is is an expected behaviour?
And another issue i hit about class cache is that i have some controllers that users could access without email confirmation after registration and the boolean of confirmation check is stored in UserSession(Authlogic) class. So once a user trigger the disable_confirmation_check, other users could access all the site without email confirmation.
These do not happen in development mode since classes are reloaded every time. It may cause security issues if developers are not aware of what they do are involved with class variables which is only persistence in production mode.