why `mHttpAuthDialog` is `final` here?  I don't see any reason to let it to be `final`