http auth for production