I get the answers, but why not cache the password in the browser for the duration of the redirect? edit: ah I see, sometimes cross domain, that would make the

I get the answers, but why not cache the password in the browser for the duration of the redirect? edit: ah I see, sometimes cross domain, that would make the handover potentially dangerous. I thought of just keeping it in js.