I think it's really great, but I would like what is "suspicius behaviour", so I can be more relaxed knowing it won't fail and auto login someone else with my username. Is it an IP difference? I think that would be a good meassure