http basic authentication improvements