Thanks very much, David. I'll check those resources out today.
I do actually have the bypass key switched off, and that's another function the back end form provides - if you get the password wrong, the database just closes (and you can't bypass the form), but if you get it right, it stays...