Initial implementation. The password is hardcoded on the server, but properly prompted in the browser.