Header auth

Lay the foundations for implementing kerberos auth. Since HTTP Negotiate goes over a header, do the same for our own password auth. Use HTTP Basic instead. Note this doesn't change the UI.

Remove a bunch of code related to HTTP POST support.