Keyword: Security

critical

Model-based access rights

major

Automatic determination of possible authorization configurations

minor

Re-login on session timeout instead of redirect to login page
Login Form: Use "Username" Instead of "Name"