to say my setup is using ats as reverse proxy.
Hmmm, well, same applies, but seems even less likely. You'll have to
trace some sessions, and try to understand why the cookie sessions
would expire. I do this all the time as well (reverse proxy from ATS
to Drupal) with no issues.