title: using user name and password in a webservice call
body: <p>I am writing java web services that need to accept user name and password from the caller for internal authentication before prviding the response.  What is the standard way (or best practice) to do that? is it in the SOAP header or should it be supplied as one of the message parameters? where can I find code examples for that?  Thank you.</p>