Why are you not using https on a page where I'm supposed to enter my password? I see it's submitting to a https URL but it stills feels a bit weird to not run everything with https especially in that field.