I agree, however, we'd have to compromise a bit of security allowing people to submit their u/p on an regular http page. Any suggestions on how to avoid this?