Multiple Connections in 5.1

Why does monitor.nlm show multiple connections for same user one being “normal connection” and one being “authenticated”. Licensing is exceeded because of two logins per user.