Since logging in using password is just uncool. Also, two-factor auth isn't supported when logging in with HTTP auth.

Possible things to do:

• Personal access tokens
• Real OAuth flow, e. g. via hello.js (a bit harder, but friendlier)