Remove SSL http basic authentication because of same origin policy issue.
Add session cookie authentication.