control-spec does not cover password authentication
The section in the control-spec.txt about the AUTHENTICATE message (3.8) is a bit unclear on the format in which to send the credentials. The cookie authentication is only mentioned, but no message format given, and the password authentication is not mentioned at all.
(The cookie auth message is quite easy to figure out by trying, though - just send the cookie file as the message body.)
[Automatically added by flyspray2trac: Operating System: All]