allows HTTP authentication (we'll be using this for the iOS app)