Query http auth for ?httpauth=1 even if there is a cookie, add login throttle