WhoaLegacy on "Web Site Timeout and App Settings"

You need one. Plain and simple. I can't believe this isn't a huge compliance issue.

If you have one, it is overly long.

I would say the same for the client. A password to get at the settings.

Thanks.