Make
http://news.ycombinator.com/newslogin redirect to
https://news.ycombinator.com/newslogin. Not to be overly facetious, but there's some irony to having an unsecured login form on a site called "Hacker News". :p
On a related note... any chance we can get confirmation on passwords being hashed/salted?