http bip basic auth fix + npm bump