merged HTTP auth with latest version