Currently, when the next user attempts to login, regardless of credentials, if the credentials are met then the application becomes active again ... with the old user still logged in.  I see the value in this assuming a user simply wants to lock their application and then return to it later.  But I want the whole login process to occur again and the Security object to reflect the newly logged in user.