Use of Basic authentication in section 6.1

[gffletch]

The non-normative example in section 6.1 uses HTTP Basic authentication for client authentication. I'd recommend using a stronger client authentication mechanism in the example.