Assumed security between nested login sessions