Rather than use crypt(), I'd recommend thinking about MD5
style hashing for the password encryption. I ++ed this post
because of the 'HTTPS' recommendation. In-the-clear passwords
protect nothing from the dishonest, they just keep honest
people honest.