Hi Simon,
I noticed that most financial sites like banks have an automatic log out after some time of inactivity.
Could a similar thing work here perhaps?
If someone has logged on, but not used the site for say 20 minutes, could they be logged out and have to reenter the passwords?
That would prevent someone accidentally leaving their log-ins and username visible if they leave the computer accidentally open....and save some potential issues for those fading...