Do not permit HTTP Basic auth without HTTPS
Handle error response from server.