Another suggestion: Could you increase the timeout-time for logged in users. I’ve lost a few posts because of the time-out since I sometimes go googling for example images etc. and it’s really annoying that the session dies so fast. Ok, usually the messages are “recovered” when starting a new one.. but it’s still annoying.
I think the timeout should be at least 1 hour. Preferrably the timeout could be disabled altogether. Webmails and google-accounts etc don’t have timeouts and they usually contain more sensitive data so I don’t think that is a problem.