Hi Albert, passing an encrypted password is as secure as passing the password itself, since
nothing prevents a hacker to use the encrypted password to gain access to your server.

You better implement some type of digest authentication, this way you don't store nor
send passwords, but hashed strings wich change on every request.

( but you don't specify if you can change both server and client code. )