The BasicAuthentication implementation uses the username and
password provided by the application Authenticator class,
but before returning to the user, it clears out the password
from the char[] passed in. This behavior is not documented
and means that repeated attempts to use the same PasswordAuthentication
instance will fail from the second attempt onwards.