Any chance of spinning up an HTTPS version of the site? This would encrypted sensitive information: U/P login, URL payload/querystring, form post...