Lazy Basic HTTP authentication. Authentication is only forced when the credentials are actually needed.