[herge]

How can you make sure that the password is never sent to the server?

It could be encrypted with their own password, encrypted as a url to a css file, etc.