Say I want to send a username and password as the payload of a POST request. Would that username and password be secure/encrypted like with HTTPS, or is it just sent as plain te