Hello,
A) Please use same setting as they are described in our documentation
here and
here (
Forms authentication enabled in IIS, Basic authentication in Site Manager)
B) That hash always authenticate a URL, so any request you are able to build up into a URL can be authenticate by the hash. However as a standard URL, these requests are GETs. If you want to send different requests than GETs, you need to generate entire request as it is described
here and the atuhentication is present in that request, so you don't need to sign anything then.
Best regards,
Jan Hermann