1. in serve side, we needto specify webhttpbinding
2. in client side, only specify username/password, it is enough.
HttpWebRequest httpWebRequest = (HttpWebRequest)HttpWebRequest.Create(uri);
httpWebRequest.Credentials = new NetworkCredential("username", "password", "domain");
return httpWebRequest;