better exception handling when in daemon mode.
introduced a session to keep login if browser decides to discard http basic login data, and added a url param to not promp for auth