title: Chrome Extension Login Security
body: <p>I have a website where users can signup and I want to provide some features using a chrome extension, I'm a bit concerned about security:</p>
  
  <p>My idea is to show a login form in a popup and then send an ajax request to my server with username/password (using HTTPS) and then store a token into localStorage that is used for following ajax calls.</p>
  
  <p>Is this insecure? Why? I don't understand how this is more insecure then using a form on my website for example or logging sending an ajax request from a client side js framework</p>