ofxclient looks like a full featured ofx library for interacting with your bank. But when you initially check your username and password it looks like you're sending an http request containing your password directly to the bank. It seems unlikely your bank would let you do that, so I expect I'm not understanding this code.
What's going on? Is there something you're supposed to do to put this under SSL?
Looks like it's using HTTPS for the encryption.