Transfer from mercurial.
Authorizer now uses basicAuth instead of XSRFT cookies.