HTTP basic authentication

Our Web server is configured to require HTTP basic authentication for all URLs containing …/protected/…, e.g.: secret.txt.