HTTP Basic security enabled! Still performing the in memory auth which can (and will have to be) extended.