During a review of a web-based application used by customers to check the status of their bank accounts, it would be most important for the internal auditor to ensure that: