Some work on getting HTTP auth protection working.