the weblog of Lucas Gonze - 2006, the year HTTP authentication broke
"A few months ago a fellow named Jean-Michel Hiver posted that you could in fact do a clean and modern log-in browser interface using only AJAX methods."