Tell me you pass the clear text of the password around in URLs without telling me you pass the clear text of the password around in URLs.