@John Pratt - That's actually not true either -- One Time Login is pretty much useless against Firesheep. After that one login, you'll have the same authentication cookies for the duration of the session.