The way to do what they're trying to do and protect what they're trying to protect is to follow the amazon model. Amazon, too, continues to recognize your log-on, but when it needs heightened security, it intercepts and asks for password confirmation...then puts you right back where you were before.

Indicating to a customer that they're logged in (via the "sign out" option at top of window), making them go thru lots of searching to find the right hotel and rate, then giving them a huge number of blank fields that ought to be filled in for them - without ANY explanation - is just idiotic, IMO.