bugfixing and allow http-auth