Comment by anty

Username and password are still sent in plain-text. You could use HTTPS to make the communication secure.