add makeHttpHandler
check user-agent and password, record username