Basic Auth tested to work (But the client must be running on the same Domain/port). CORS needs to be implemented somehow.