added http authentication