can you elaborate? Does this replace, say, apache's basic/digest authentication system?