On Tue, Jan 13, 2004 at 10:15:47AM +1100, Alex Satrapa wrote:
> **using form-based access, the user can log out when leaving the
> terminal. Using HTTP basic, the browser is likely to remember their
> login for the entire session, and sometimes even between sessions.
You can persuade the browser to forget the password just by sending it
a 401. Unfortunately, the user then has to know to hit 'cancel' on the
resulting dialog box.