one does not simply log into an unencrypted site