I am working on a EDIT: mobile web app which displays some sensitive information and requires a login which stores the members username and password in a HT
I work on an application that faces the same problem. Security is important for this application because it allows users to build personal trees (or nested lists) and to store them on the cloud.
My solution is to encrypt the password stored on the client side with another password generated by the server for each user.