Correct me if I'm wrong but this is standard practice for browser extensions. Possibly the only way to log in browser extensions?