Hi Gavin,
The behavior of the CSS is different than the one of the routers. The prompt you get when you log in depends on the privilege level of the username you used.
If what you want allowing some users access with limited privileges, what you can do is create a new local username for this limited access. They will get to the non-privileged prompt, and, if they type "enable" they will again be asked for username and password.
I hope this helps
Daniel