Possible security glitch with switching users?