User Remains Logged In After Browser Closes

I have tried Community Auth and Ion Auth. In both cases the user remains logged in after the browser closes.

I have tested both libraries using the 'Remember Me' feature but not checking the box, and turning the 'Remember Me' feature off completely. In all cases, if I'm logged in and close the browser, then I'm still logged in when I re-open the browser and revisit the site. Even if I wait a few minutes before going back.

I've also tested this on Firefox and Chrome.


Am I missing something about sessions? cookies? Please help.