You are sending email + password in plain text through URL.
https://txtpen.com/login?f=true&username=<username>&password...
Please change this.