SuiteCRM security problem running 2 instances on same server

I have configured SuiteCRM on the same server e.g. www.example.com/crm1 and www.example.com/crm2.

When I log in into www.example.com/crm1 and can change the url to www.example.com/crm2 and get into that SuiteCRM without log in.

Can somebody let me know on how to prevent this behaviour?

Regards

Cedric