I think The explanation why this has adjusted is RFC 2616 assumed HTTP authentication might be utilized when in exercise today's Web applications Construct personalized authentication strategies working with by way of example varieties and cookies. Anything at all which can be very easily guessed is not Harmless like a http://pigpgs.com