Hi there,
I have exactly the same problem.
In my page settings is the following:
/user = only visibile for logged in users, if not please redirect to login
If I enter the url in the browser, everybody can see the user menu.
The other case:
I have linked the /user in many occassions. If a user is not logged in he is now automatically redirected to the landing page, but in my settings I made a redirections to the login page.
It worked out perfectly before the update.