MS UI - addHost call is a GET and the password of the host goes as cleartext

[Koushik Das]

The request URL may get logged in Tomcat and that may lead to security issues. 
Any call having such data should be a POST.

Thanks,
Koushik