Monthly reporting that can be sent out to clients has a simple link that provides access to the report with no kind of authentication. It would be nice to have some sort of authentication on this. Even if it's a simple PIN in the email, that way the report can't be opened by discovering the URL.