Masterchief

http://www.elims.org/wmsecure.htm might be worth checking into.

Personally i prefer to use IP based authentication, but it's hard for me to give advice without know your setup and etc.