I am working on a EDIT: mobile web app which displays some sensitive information and requires a login which stores the members username and password in a HT
Storing sensitive user credentials are really not a good design. Instead generate a authenticated token from server using, say, sprint framework. You can then store the same in localstorage using the Web DB Security module.