set auth=None in DXHTTPRequests to file upload/download URLs, to avoid clobbering server-specified headers