Other than that, I know it's a common mistake for members to access your website first via http://yourwebsite.com and then http://www.yourwebsite.com, which can lead to them being asked to sign in again. You can use .htaccess to force the domain to include the www. (or not include it) by default.