Interesting post, John! Until this problem is properly addressed, do you think there is a better form of authentication than the UserID/password/phone location combination?