Logout keeps credentials

[palavrov]

How can we support logout of a user and then optionally logging as a different user?

What I see now is that credentials of the first successfully logged user are used always including after logout in case of access to protected URL.