You’re hosting a public website that sends passwords across the Internet in clear text, unencrypted.

Fix that or you shouldn’t be running the site.