Who should we ask to test the form? I want users to try to break it.
- Leave fields blank.
- Enter bad dates.
- Click to "Not in list" check box and see how it behaves.
- Upload files types not in the list of preferred.
- Upload huge file.
- Use the "Submit and Add Another" button, repeatedly and with intentional errors.
Document upload. The document upload is working well but I want to try things on the back end to make sure uploaded documents are secure and cannot be accessed by anyone via the web.
Central Authentication Hub. I got a polite RTFM from OIT in response to my questions about CAH. I've spent several hours messing with it myself and am getting no where. Patrick's back from being sick so I'll pick his brain.

Thanks to Patrick I now know how to extend the session timeout beyond the default 15 minutes. I set for 30 minutes. I think that's plenty.