I've been looking at the Ensim demo on Ensim's site, and while you're using it, I notice that the username and password are in the URLs. Can an Ensim user confirm that this is always the case? Seems a security risk, and in general not very professional.

Regards,
Troy

No
This is not the case in normal use.
They must have done that to make a clickable link.

However, as the interface is accessed via SSL there is not really a major security issue.

Gordon