Add password support and use proper HTTP response codes