2) The login must be using secure https: not http:
3) Viewing credit card details will require your password entry if your session has been inactive or no . The password has been entered within 15 minutesyou need to enter is the password you use to log into the system.