modified authentication to form based, removed the basic_http one which was not suitable due to missing logout