added virtual host based authentication