Try accessing /restricted, then authenticate with "foo" and "bar".