the http-interface uses the same accounts as for ftp/telnet, the only thing the users need is the H flag, but as NeoXed said the http-stuff is far from finished - but login, browsing, downloading works (at least it did in older versions, not sure now
)