Since you are logging over not SSL your information is being send in plain text.  This means if anyone is capturing your traffic they will see your email address and password.  To protect yourself you will want to establish an SSL connection before login.