Using http basic authorization instead of login service/cookie authorization