3 ms·You should also serve the pages on which the login/signup/changepassword forms are over SSL.by mAritz 13y agoYou should also serve the pages on which the login/signup/changepassword forms are over SSL.