Playing with basic http auth without user model security

Playing with built in http auth done without user objects.