This is actually for security -- your password is never sent to the server, and so the client needs to decrypt your wallet again.