Suggestion: The log in screen would be better if it was SSL encrypted, so that your user name/password isn't being sent in the clear.

I did not even realize it wasn't, it's so standard to encrypt.  This leaves the accounts here extraodinarially vulnerable and it would be trivial to fix.