Implements HTTP basic auth in #5.
Removed TODOs.