Add note about HTTP basic usernames.