you probably have unique SSL Certificates on each cell for the console proxy. if you luck out and balance to the cell the created the session token, the certificate will match. However, when you balance to the node that did not make the token, there will be a thumbprint error and the session is not trusted.
Double check to make sure that the SSL Cert on cell 1 and 2 is the EXACT same for the consoleproxy entry.