Actually the fix is already included in this minor release:
Basically we generate a random token during installation and save it in installation directory. The default installation directory is user's home directory. When folder permission is setup correctly, other users on the same machine won't be able to see the token.
All the URLs of initial pages now require this token as part of the query string. (URLs are hidden in prism UI)
This is a stopgap solution until we have real offline login support.