One of the founders of your company has had their sibling testing the latest incarnation of the web site. The sibling is upset at having to re-enter their username and password before accessing the shopping cart or checking out. The sibling wants to be able to only type in the username and password once, check a "remember me" box, and have the site remember that information. Explain to the founder and their sibling why the security team has chosen to have users reauthenticate.