Please add SSL to your website. Any site that controls the settings to an account with money in it (aka autotrading) needs some form of encryption/security. HTTPS/SSL would satisfy this.
HTTP is insecure. I hate typing in my password and potentially know it might have been sniffed.
And, secure/https the whole site, since what I browse on this site should be considered private between you & me, and not someone sniffing network traffic. And don’t lie to yourself that network traffic sniffing does not happen.
And never send passwords in emails (e.g. forgotten password scenarios). This is what security questions are meant for.
Just interested in seeing the security of this website improve.
Regards.