fixed up auth to use http