support HTTP Basic Authentication

To use: specify a username and password in the API url,
for example https://user:password@yourhost.com/path/to/odm/