ISSUE#304 Send passwords in body rather than in URL.