[http] very basic auth