I believe the reason why this has improved is RFC 2616 assumed HTTP authentication can be used when in observe modern Web apps Create customized authentication strategies employing for instance kinds and cookies. If HTTP authentication just isn't in use and the service includes a cookie-dependent authentication plan as may http://pigpgs.com