A user on one site in a multi-site network should not be able to login into another site via this plugin. Currently that is the case.