change default http auth config, update readme