Thanks Rob.
All these suggestions sound good, many people have suggested alternative login procedures in the past too.
Unfortunately it's out of our hands as mods and up to Mike to see what's appropriate to implement for IIS.
Feel free guys to send him a PM with your suggestions.