I been working with a customer with an issue that I realized that is a problem related of litespeed since when I tried with apache works perfectly fine (even on the same server).
My customer is trying to allow GET and password protect all the other calls. So, what he did was password protect...