hi,
  You can use encoded authorization credentials 
in the Authorization header which contains the 
client's username and password encoded in Base64,
it can check the credentials and send WWW_Authenticate
if allowed or SC_UNAUTHORIZED status code if not allowed.
Hope this helps better than jar file.
Indira.