Catalyst authentication against a remote HTTP server