* choice for stronger cookie encryption * optional stronger security * testing of more platforms and authentication mechanisms * more documentation