switched to http get authentication