I'm going to need a good bit more than a form on an otherwise empty page to convince me that this is anywhere near secure.