t#2086 add session handling via authenticate_with_http_basic