Security Checklist for Login Module

While a programmer is proceeding towards architecture of login module design and development, following checklist is quite important not only in terms of security but also to avoid frequent updation in the architecture of login system.

1. On password reset, all Login Remember must be removed automatically 
2. On password reset, user must be notified on his mail that his/her password has been reset.
3. On logout, blockage of pressing backward and again sending login credential information must be taken care.
4. User can check remember me option, but a special variable must be saved instead of password or user id as cookie in the browser. 
5. User can be asked to enter password of at least 6 characters.
6. After a gap of few months users can be prompted to update their password credentials based on their record over the frequency of invalid password entries.

While sending login details to the user, the data must be sent as POST method. When a login credentials are being sent using normal post method, it is necessary to disable back button or clear previous history.

However with the usage of ajax post method, this browser security mishaps are easily avoidable.