> It's significantly harder to style, which means it's hard to work password reset into it. Couldn't that have been fixed with a new parameter in the Authenti

> It's significantly harder to style, which means it's hard to work password reset into it. Couldn't that have been fixed with a new parameter in the Authentication header? > It doesn't easily admit to "logout" I think it easily admits logout—the browser should have a piece of UI which reads 'logout'... > It doesn't gracefully handle token authentication. It could be extended to do that, with a new authentication type, right?