quick testing notes

I’m helping out some people with some website testing. I was curious and I discovered it’s running on AWS. It seems a bit much for a testing website, but OK. It also spurs so many questions:

  1. What’s the cost to keep it running 24-7?
  2. Why does it use HTTP Authentication instead of sessions authentication?
  3. I thought no one used HTTP Authentication because it was easy to spoof. How was that done?