userID credentials are now sent and received using url-encoded base64. The userID grabbing won't really be useful, but I think it works as a proof-of-concept authentication over BASIC HTTPS