The problem is that you might say that you're not storing the credentials, but you could, very easily... And if you ask for the credentials, you'd have to have an SSL secured page...