Since F1 auth information is being passed to drupal the forms that consume this should happen over ssl.