Your mail default is to keep signed in. That is a potential security risk. The default should always be to sign out on closing a window. I notice I am far from the first to make this comment. Most other sites follow this rule - you should too. Also, you have recently changed the log out to prompt for confirmation requiring an unnecessary additional click. Good design always keeps the number of clicks to a minimum. Yahoo should know better.