HTTP auth + design updates