+1 on turning off auto log out

It’s actually a security risk, since the site is not encrypted and the password is sent plain text each time you need to log in. A steady cookie session would provide more security and convenience as passwords won’t need to be sent each time you revisit the site. (as it also would be with stored passwords in the browser or any password manager)