One thing that I noticed was when signing up the password is sent across (with the username) in the query string in plain text. After that gets updated I would be very interested in spending more time with this!