Reported by @MJCliffe. On multi-user machines, a user can log out of datalab but remain logged into the underlying oauth provider, so when the next user comes along and clicks login, they are taken to the other user's account. It seems like there's some possible workarounds for this, the best one being revoking the oauth token when datalab is manually logged out (which will mean that normal session expiry will be unaffacted).