The Authentication forms should ideally submit to HTTPS, but it looks like you haven't setup SSL, but should.