Do you really want to store user passwords on whatever computers they happen to use, away from your control?