Situation:
The problem with option 3 is that the auto-logout would be trivial to avoid once the scraper figures out what is going on.