updated HTTP authentication