SuiteCRM security problem running 2 instances on same server

I have configured SuiteCRM on the same server e.g. and

When I log in into and can change the url to and get into that SuiteCRM without log in.

Can somebody let me know on how to prevent this behaviour?