[Coda]

This thread is fine where it is.

We'll take the suggestion under consideration, but best practices in account management will do much more for protecting your stuff than an extra password prompt would. Don't mark "Remember Me" on computers that can be used by other people. Log out and close all browser windows after using such a computer. Don't tell anyone your password, and don't use the same password for multiple sites.

In general the extra password prompt is more of a hassle than it's worth. It gains very little security, only time -- it only protects you in the event that you don't follow best practices, and if you've been ACTUALLY hacked it only slows the attacker down by a few seconds -- and it adds extra steps to the trade system, which makes it less friendly to use.