Sorry, I should have expanded:

• why? JavaScript enabled browsers can possibly be manipulated to steal your user cookie.
• Allow list of acceptable IPs if on more than one fixed IP
• optional!!!, not mandatory

I just thought it would improve security a little...

cLive ;-)