"Also, would this approach be faster than just including the email and password in a header in each request and using HTTPS?" . . . .