HTTP access via logged-in session.