hi Martin ,
Yes we are not simulating user , but in the browser memory we are able to find the user name and password in plain text .... using winhex tool we can read the memory of the browser as these credentials are passed through the post request.
Regards
Govardan Raj