You very much need to add a link to the "Remember me" checkbox on the
login page explaining what it is all about. Nobody knows what it
means. They don't know if it means same IP needs no password, same
browser, etc. All a big worry.

Better yet, add the fine print about what the user is getting himself
into by checking "Remember me", right there below the box.

Version: unspecified
Severity: trivial