additional http client added, for non-API requests:
- supports login with login/password
- supports reviews

Added new fixtures, tests for new client.
login controller now supports login/pass auth