Add a FIXME about switching from GET to POST to /rest/login
Implement credential-checking for /rest/listbooks
Change from code to realm in /rest/libraries