Are you checking for a valid session and when you log them out are you clearing any cookies? What method of logging in are you using? Did you set a session timeout?