It's going over SSL (JSONP). Nothing insecure. And you password is encrypted in our DB.