With security in mind as many sites now provide please consider adding support (optional in Admin) to allow a user to setup two factor authorization. This will allow someone higher security for ecommerce in scenarios of stored credit card data, like amazon, and another user logging in and making purchases if knowing their login info.