Thank you! That is exactly what it ended up being. I had disabled the template cache, the system cache plugin, etc... but there are so many other places where files/sessions can be cached. I disabled caching from my .htaccess, browser caching (which I already had) but the culprit ended up being caching through my website firewall, sucuri. Apparently I had enabled caching there and that was it.