Originally Posted by
jMerliN
Suggestions:
1. Smaller border radius. Large rounded corners are obnoxious and painful to look at.
2. Don't emit HTML from PHP, instead develop the UI in HTML/JS/CSS then send XHR POST's to the back-end to do authentication, and return only JSON. As emitted HTML in this fashion is difficult to cache, you end up wasting a lot of network traffic on what are really just you wanting to ask the back end "is this person authenticated with this username/pw pair?".
3. Support SSL and proper session ID switching (using secure only session and changing the insecure session ID after log-in, as well as generating a per-session independent key to use for anti-CSRF purposes).