b up
SWD -> WebFinger
use Basic auth header for client authentication