basic auth, checking user name and password... no redirection or any indication other than in console
client side auth enforced