feat(*): user login with HTTP Basic Authentication.

#1 
is $timeout needed?