Login & Session Problem

Hello,

Ican't figure out how the Sessions, Roles an login Data ist managed. In the demo the session wasnt destroyed after logout (now i fixed this) but when i'm entering the URL form the controller.php directly AND deleted all Sessions im able to login wothout any passwort AND a news session is created.

On the demo site here i can also login without any input of user And Password and if course openbiz doesn' car about my defined roles in the database..

Has anyone a working example or am i just to dump today? :(

 

Best regards