Thanks. Though I manually deleted the cookies to test it we can programmatically do it using the HttpServlets.
The cookies are used by website owners mostly to gather information on user preferences. We can get details
of the cookies using their domain names and then set the age of the cookies to 0. Then the cookies get deleted
automatically. So when the second user john or mary logs in they will also have to the second authentication in
the BPM console.
Of course the other alternative is to eliminate the second authentication itself which seems to be redundant in this
case. For that of course it is necessary to update source code for GWT console & server. Then build the war files
and then deploy it on the server.