authentication scope with persistant connections

Hi,

I'm trying to work out how authentication and persistent connections
interact. I initially thought that the authentication header will only
apply to the scope of that particular HTTP exchange, however I'm
seeing with IIS that subsequent requests on the same connection
continue to be treated as authenticated even if the following request
doesn't specify an authentication header. 

Can anyone clarify what the expected behavior should be ?

Thanks
Simon