When someone logins through Apache authentication, Jira takes his username and uses it without asking for username and password again. It does make it a bit more convenient, there are some drawbacks. For example, if someone wants to logout from one username and login as another, he has to close the browser or do similar things to clear authenticated sessions.