session and user-authentication problems

[obra]

I made a web application to run on web server with basic authentication. When I first try to acces this appl. with ip phone i get username and password response from web server and after supplying credentials i ca continue using this app. Buy when I log of this user from the phone and log as different user, I can still acces this application without username and password. So, can enyone tell me what to do to force the web server to ask for user credentials everytime the user tries to access application??

[jshepard]

The session information is cached and takes some idle time before it resets. This was as designed, and the design is being evaluated to determine how to implement a better way to do this. Your application could force users to enter UserID/Password each time, but that could become laborious to your users.