prefixed the most of the keywords with 'http_'

Most keywords will need a $REALM, for it can't be stored in a session cookie
therefore, it should not be accidently swappable with Plugin::Auth::Extensible