added http based authentication