http authenticate skeleton