HTTP auth FTW - let’s keep it simple, folks