@jonas
I find it a little troubling that you mention maintaining a list of usernames and passwords. You’re not actually storing anyone’s passwords, are you? This doesn’t sound secure.