Overall the web-site technically looks great, however the login form is using $_GET method. This should not be used there, since sensitive data is now posted into the URL.