Hello. That's normal, I think. But yes, it seems to be unsecure. Anyway you can email a link to a secured page where broker would login using his username/password and will get information.