[anotheryou]

I get the answers, but why not cache the password in the browser for the duration of the redirect?

edit: ah I see, sometimes cross domain, that would make the handover potentially dangerous. I thought of just keeping it in js.