HTTP Basic Auth
require GETs