It seems like the HTTP authentication check would fit naturally in the
existing check_url_available promise, since the logic is so similar.