the browser will continue to cache the authentication info until the browser is closed or the remote site sends a different 401 header (which has the problem you pointed out).
just have the users close the browser when they're finished browsing the site. if you need to allow the users to be able to logout, consider using sessions and not the mod_auth modules.