Extended basic user auth with auth tokens for resetting password and storing session in permanent cookie if chosen.