How about fixing the log-in system? It claims "bad login" for valid credentials, doesn't say what's bad about it, and doesn't provide any way to reset supposedly bad passwords.