Y'all don't look evil. But it's really really skeezy to ask folks to hand their passwords over to your code. Wouldn't your API work go just as smoothly if you had them go to elearning (or maybe even login.ufl.edu) by hand, before running them?