Pro tip: if your website allows login without SSL/TLS, you're doing it wrong. Pro tip 2: [wait for it] 1/2