Oh my GOD! Using this authentication, placing username and password on the URLs, is basic web application security NO-NO #1!!!!!! You learn that day one to NEVER use that!

I like this quote from...