Works.  yey.  now to stop sending my password over http