I think if they do that disable JavaScript, then the md5.js will not run, nor will it submit the login form on the original router login.html page.