- Refactor Http auth APIs
    - Changed HttpAuth, HttpSetAuth, HttpGetCredentials
    - Remove conn->password
    - Add httpLoggedIn, httpGetCredentials
- Fix httpCanUser for explicit abilities
- Fix Restful update route pattern