Same thing happened to me.
Turns out I clicked a link to aa.com that was posted by another member. I ended up inheriting that person’s login info.
When I attempted to view booked reservations, I was asked to login in. I am not sure what happened if you click a link from a "live" session.
Moral of the story - never post direct links from aa.com to a public website if you are logged into aa.com.