Add a configurable session timeout for the Member Portal that automatically logs out inactive users after a set period (e.g., 5–10 minutes). This would help prevent situations where a member leaves the portal open on a shared or public device and another person accidentally performs actions under their account.