If you can sniff other users' cookies, you can get their passwords. Good thing no one reuses passwords across sites!