Originally Posted by
snic
It's really not that complicated. Require online cancellations of award tickets (and, at passenger's request, other reservations) to be from a logged-in account.
To me, this is good enough.
For award tickets, changes can only be made via logged-in account where the miles were from.