do http auth checking in solitude (bug 880363)
require event notification endpoints and whitelist (bug 866939)