Link user to Protocol, add basic auth approach and don't leak passwords.