We should note that we transmit the user/pass in plaintext that has been base64'd.