No secure HTTP.

I only just seen/noticed this since the upgrade.

Really? letting people pass username and password credentials over an un-encrypted connection?

This should be your number one priority in getting resolved ASAP.
 
Top