title: Login sent in plaintext over SSL?
body: <p>I was testing my website with SSL enabled and disabled with OWASP ZAP (A proxy used for local browser traffic sniffing) and noticed that my login is sent in plaintext both over HTTPS and HTTP. Is there a way to prevent this?</p>
  
  <p>I am using Tomcat 8 and Eclipse Mars as the Java IDE for writing the site.
  (Image below, as I do not have enough rep to submit it properly)
  <a href="https://s3.amazonaws.com/f.cl.ly/items/1N0h1l0K12470p2K123s/Image%202015-04-02%20at%202.52.00%20AM.png" rel="nofollow">https://s3.amazonaws.com/f.cl.ly/items/1N0h1l0K12470p2K123s/Image%202015-04-02%20at%202.52.00%20AM.png</a></p>