Site Security: 2FA incl. TOTP, manage user passwords and sessions, renew security KEYs/SALTs. Define: Password lifetimes, password strength and reuse.