After a certain amount of inactivity, if a user attempts to POST an action via ajax, a dialogue will pop up asking if they want to POST as someone else. If they opt to do this, they'll be asked for a password.
Optionally, they may decide to stay logged in as the new user.