I second this... using the "remember password" as a token-based login + two factor authentication has been the best login method for me.