* libs/web: Switched from HTTP-Basic-Auth to Session-Auth