reference material: http://www.bennadel.com/blog/1574-Ask-Ben-Manually-Enforcing-Basic-HTTP-Authorization-In-ColdFusion.htm