consolidation; add basic HTTP auth