updated STHTTPRequest
explained reverse authentication usage