I think that you're essentially asking how to prove knowledge of a shared secret (i.e. username/password) to the server over an unencrypted HTTP connection?
Basic rule 1: don't roll your own crypto[graphic protocols]: if you need confidentiality and integrity (i.e. encryption and authentication, amongst other things) then use TLS/SSL, unless you're smart/knowledgeable/experienced enough to do it yourself.
Basic rule 2: don't enumerate algorithms/techniques (such as public key cryptography) and ask whether they'll solve your problem, without first understanding your security requirements. Cryptographic algorithms provide security properties like confidentiality. Security requirements end up (following some analysis) depending upon certain such properties. Appropriate techniques therefore drop out from an security requirements/analysis exercise, rather than the other way round.
To answer your direct question: no, because you've just replaced one secret with another (and hence not solved your problem), not considered replay attacks, and not considered things like confused deputies and connection hijacking.
If you still want to roll your own then first figure out your security requirements: you're trying to authenticate the client (i.e. browser) to the server, but does the server have to prove its identity to the client? Why are you authenticating? If it's to grant access to certain information, then why are you then promptly sending that information in the clear having authenticated? (A MITM isn't the same as a passive observer.) Do some threat modelling. Assuming that you're OK with all that, you'll probably end up inventing something that looks like an HMAC with either time or server-side state to prevent replays. You'd still have the problem of either sharing a secret or agreeing upon a trusted third party though.