HTTP requires a it handle GET and POST operations (and HEAD, but that's another story) and returns graphics and test back (and either 200/404/etc)

You could just ask him what page he had "protected" and do a wget on it.

(Strictly speaking, he can make screen scraping very difficult. Humans can handle data being displayed different ways and can ignore it. Screen Scrapers depend on the data being presented consistently)