feat(*): user login with HTTP Basic Authentication.

#1 
It's enough to inject the BACKEND_URL, as the logout is always ``/user/logout``