moved from custom TCP to HTTP

Auth also changes to token in Authorization header
builds on #24