Index page HTML authentication form submits to GET:...

[J]

...http://userfoo[email protected]/directory? This way you could use basic HTTP authentication while avoiding the ugly browser-based dialog. Do you see any problems with this?