Identity Injection keeps appending the same injected query line parameters with every new request coming in from the browser

NAM 3.2.2 (upgrade from 3.1.4 and LAG)
Identity Injection enabled on Protected Resource
User authenticates and can SSO to app with LAG; after upgrading to 3.2 AG, the SSO
fails because the II injection duplicates the credential info passed on the
command line.

eg. the following protected resource injects the USerID, AgentNumber and title.
When the request is passed to the web server, the web server sends back the
credential info in the following form

<form name="aspnetForm" method="post"
action="EditDocument.aspx?di=2224&amp;UserID=xrs03&amp;AgentNumber=031027400&amp;Title=Principal"
id="aspnetForm">

When the browser submits this form, and II picks it up, II injects the same
info again into the query string ie. it POSTs to the following URL

POST /EditDocument.aspx?di=2224&amp;UserID=xrs03&amp;AgentNumber=031027400&amp;Title=Principal&amp;UserID=xrs03&amp;AgentNumber=031027400&amp;Title=Principal"
"

This causes the SSO process to fail at the back end.