Good point, security is vital to this (hence everything is https). I will be looking into this.