It should be possible to receive an email notification (with ip and time information), when someone logs in, into the ACP. This helps admins to realize that their account has been taken over by someone else.

If we add an option for this, it must be confirmed via email on change, otherwise the attacker can simply disable it before logging into the ACP.