moved require
added a basic test for http auth