add login code, but look like Jersey's HTTPHeader is not like normal browser