Been absent a bit. Notice that log-in sessions do not (or don't seem to) expire after I close out the site. Came back hours later and was still logged in.
Are you going to institute a time-out/auto log-out? If not can you include an easy to find/obvious Log-out button?
I use the stay logged in feature but my system still logs me out automatically so that I have to re-log in each time which is not a bad thing. My computer has been attacked several times unsuccessfully, so it's a good thing.