Avoid using other libraries in own library

I think, the authentication sub-system alone (let us forget about the access to the logging form for now) should check whether a user tries to log-in again. In this case I would log-out the old user and let the new user log-in. The corresponding events might be triggered properly, and they would be recorded within a log (if there is such) in the right sequence.