I used an authenticated cookie rather than a user/pass because I don't have direct access to an F5 and this was the most for sure way I could follow the POC. I am happy with changing it to user/pass if someone with access to a device to coordinate with me.