Have the person SIGN IN with their Comcast.net credentials, and once signed in they can be authenticated for what access they have. So then people can log in away from home.
Limit it so only one user can be on at a time, just like the old AOL days where people used to create screen names for each other but if you tried to sign on it booted you off right away saying so and so was already signed on.