When a user tries to log in with an invalid password while the same user is already logged in with another session that session is invalidated irrespective of the fact access was denied

Usually when a user logs into the CMS while that user already has an active session on another browser, the latter is logged out. This is expected behavior. Now it seems that the latter session is invalidated even when the former login attempt was unsuccessful due to an invalid password.