The JS-SHA-Login is a way to login without sending the passwort in plaintext to the server. It's implemented in the PyLucid auth Plugin.

More info: secure Login without https

(In the past it named JS-MD5 login, because we used MD5 instead of SHA1)