I've been having a constant struggle with being able to log into the site www.dragondirectsales.com. It's a magento 1.9.1 site. The site has a subdomain, cas.dragondirectsales.com. Everything seemed fine until we moved the site to the live hosting that they are currently using.
Ever since, we've been fighting issues with logging in, both on the front end (customer logins) and the back end (admin). If you attempt to log in, it just loops you back to the appropriate login screen with no error messages. Again this happens only for customer logins.
Every time it happens I spend hours trying to fix it, and manage to get it working across every test case I can think of. Then about a month later the client emails me saying it's broken again, and swearing that he hasn't touched anything in the admin section. We're on the 4th time I've had to fix this, and all the previous changes appear to still be in there, so I'm at a loss for what is causing this issue.
Right now I have the site using Secure URLs in the front end. Cookie Path is blank. Cookie Domain is .dragondirectsales.com. I'm using HTTP Only (iPad was having a separate login issue that this fixed). Cookie Restriction Mode is set to no.
The only thing that has happened between the last time this worked and now is that we had an extension developer work on the Partial Payment extension, and I'm not entirely convinced that their work had anything to do with this issue. I can turn the extension completely off from the module xmls and the issue still happens.
Any help is completely appreciated!