Holy crap, honest.cash transfers username and password in plaintext via the URL :O
Although the concept that this is going over SSL is safe,
the page is a giant cesspool of JS.
JS is occasionally necessary, especially for interactive,
but current 'norm' is Fail
