Authentication with client certificate, if no certificate is provided there is a fallback to basic authentication.