security question

[wegnerk]

Hi all,
I am relatively new to tomcat usage, so sorry for "easy" questions.

I have a web application which is running on a tomcat server. SSL works, the security constraint in the web.xml also.

My question is; how can I avoid users, who are logged in to my application, to open a link in a new tab or window and still be logged in? So, if a user wants to be logged in in another window, he has to authorise himself again. (some online banking sites work like this, but i didn't find out yet, how they do this).

Thanks for help and ideas!

regards
katya