Hey JGA –
I enabled the “hide backend” feature after posting this and realized that this move is probably one of the best I could make.
As for the salt generator – I’ve enabled it but it still confused me a bit on how to use it correctly. I’ll do a bit more research/learning this week to take full advantage of that feature and I’m sure a really long randomly generated password is a another solid lock on my door that I’ll want.
I haven’t seen the option for banning users that try to log in w/ the default “admin” username, but I’ll take a look tonight and enable that as well – solid move.
Thanks so much for the help!!