All my banks do. If they detect a browser/IP that I haven't used before they ask me for another piece of authentication (secret question)
It was extremely annoying. The last few times it happened I just didn't play for a while because I didn't want to bother with reauthenticating; that's when I realized that I didn't enjoy the game that much any more and cancelled my account.