We use javascript to make your login MORE secure. If javascript is enabled, your password is never sent over the internet unencrypted. With javascript disabled, it is sent in plain text when you log in, but only then. We also use javascript in various other places, but only to enhance the user interface.