Actually, it is stored in the user's profile. If you look down through the comments, you see that the original reporter installed FF on a single-user machine, so it created a single profile in a globally accessible location. Then, afterwards, the user created separate login accounts for Windows. Except that they didn't create separate FF profiles, so naturally FF continued using the only profile it knew about. The moral is, if you convert from a single-user machine to one with multiple accounts, either manually create separate browser profiles, or uninstall and reinstall to allow them to be created automatically. This is probably not a common situation, and I'm not sure it's really fair to describe it as a legitimate browser bug - the browser did exactly what they originally told it to do, in using a single profile, and then they apparently wanted it to read their minds and psychically know that it was time to start using multiple profiles.
Or, maybe the moral is, stick to free porn sites that don't require a login :)