httpclient is too lazy for auth, sending double the number of necessary requests