this makes me wonder if we should let solitude verify the basic auth user/pass instead of webpay. Hmm.