authenticator of type=request manipulate httpRequestOpts directly