fixed authorization (md5) according to spec