Comparing twice against HTTP_AUTH ?