Many fixes.

- Add basic auth
- Add password in the param
- Change the redirect logic