removing http authentication