Thanks re all of that. Will look at 2) and 3) in the morning with a fresh head!
quick q in the meantime, if you select Remember my information or Log me in automatically on login, how long does the session/cookie last for and can I force it to unset?