[Lazamataz]

What if one leaves the login in place all the time and never signs off? I’ve noticed this site will leave it open even if I turn off my computer. Kinda weird.

That's because you have a cookie or a certificate that allows accessing the site even after a reboot. A simple alteration of that cookie or cert, to expire (say every 30 days) would prevent that vulnerability.

[Carry_Okie]

A simple alteration of that cookie or cert, to expire (say every 30 days) would prevent that vulnerability.

Does that go on your list of things for John to do or is that something I should effect on my machine? Is there a decent "freeware cookie monster" out there I should be using?