User logins are limited to one instance at a time.
This is done via the code on the web - if a user attempts to login when logged in elsewhere, it'll force them to sign out the other instance.
However, this does not apply if the other instance is on the local.
The limitation of one login on web or local is a "spoken" limitation - we would rather clients are not logging in on both, however it is possible.