Why not run a cookie on the sign in, so that a member doesn't need to type in the user name and password each time?