Comment by daniel_iversen

These suggestions sound good but the real challenge will be to reliably detect fake logins to not suddently and accidentally mess with your real users..