Note: these settings are saved in an encrypted cookie in this browser only —
there's no server-side account system. Encryption keeps the raw values out of plain sight, but
the key ships in this page's JavaScript, so treat it as light obfuscation, not real security.
Use HTTPS, and avoid saving credentials on shared machines.