Apache removal of user's access rights

Hi.............
 
We're running Apache with ssl enabled..........We're using Basic authentication, and if the user browses away from our site and then comes back, they are not forced to log on again.......it appears that these settings are being stored somewhere, or that the connection is not being closed..........
 
If you have any suggestions on how to remedy this situation, it would really be appreciated.
 
Thank you for your time............
 
Sincerely,
 
Beth E. Okun