Prevent to send plain HTTP password to browser