If I use hashed or encrypted passwords in the membership provider why is it necessary to use SSL on a login page? ...