added http auth and new root