I have also removed a lot of the password prompts. Every single admin page load, including the AJAX requests, require your cookie for authentication, and even the cookie is just random data. I’m fairly certain we haven’t sacrificed much in the way of security by only forcing the login once. Even Gmail doesn’t ask for a password with every session.
That said, the backend is now mostly complete. I do need to add one more feature, which is image uploads, a portion sorely lacking. This has been needed for some time, as when I need an image, I need to FTP it up, which is lame. So I will incorporate image uploads shortly, and then break for the wedding and honeymoon. Then I’ll come back and release Small Axe 0.4 and get cooking on the next batch of features!