Yes - if it exists, the call is coming from a browser.  Otherwise, basicauth