HTTP (vs HTTPS) login pages are considered insecure. Firefox even warns w/ a popup.
Hackers, bad guys or bored teenagers w/ a little know how can intercept data being entered on the login page, as in, user name, password.
Once they have that, they can lock you out of your own account. Or use your email addy for all kinds of mischief.
Check it out, if you don't believe it. It's generally accepted as not a good idea anymore.
There are plenty of articles explaining why.
More sites are switching to https every day, compared to a few yrs ago.
