"Sign In" page is not protected with SSL
User credentials are being transfered in clear text. It may lead to leaking of sensitive information and therefore potentially to an unauthorized access to this site.
(from redmine: issue id 36, created on 2009-05-21, closed on 2011-11-22)
To upload designs, you'll need to enable LFS and have admin enable hashed storage. More information