Password authentication without revealing your password
Using a Javascript SHA library and one simple onsubmit protects the password in transit and also inside the user database:
<form onsubmit="pwField.value = b64_sha256(pwField.value);">
Read this for more elaborations with increased security.