- Invalidate the login token after xx minutes of inactivity - ability to add users via docker environment variables - ability to add users via configuration file