You're currently authenticating over http. Please switch to https, you're putting your users at risk by sending their passwords in clear text.