Authorise Users/Agents from a http login before hitting a local user/password database