title: No browser is sending Authorization info in header
body: <p>I'm looking at <a href="https://stackoverflow.com/questions/2716990/http-basic-authentication-credentials-passed-in-url-and-encryption">this</a> and <a href="https://serverfault.com/questions/371907/can-you-pass-user-pass-for-http-basic-authentication-in-url-parameters">this</a> and it would appear 'easy' to send the credentials in the URL. For example:</p>
  
  <blockquote>
    <p><a href="http://gooduser:secretpassword@www.example.com/webcallback?foo=bar" rel="nofollow noreferrer">http://gooduser:secretpassword@www.example.com/webcallback?foo=bar</a></p>
  </blockquote>
  
  <p>This is all well and good but <em>it doesnt work</em>. I've turned fiddler on and for Chrome the <code>Authorization</code> header isnt sent. It appears to exhibit the same behaviour for other browsers (i've got a breakpoint on the server and no Authorize header turns up for Firefox,Safari or IE either)</p>
  
  <p>How to make it better?</p>