Why would suser_name() not reflect an AD account name change?
Could this be related to caching with Kerberos?  (just a guess though might be unrelated) 
http://blogs.technet.com/b/tspring/archive/2014/06/23/viewing-and-purging-cached-kerberos-tickets.aspx