further experiments with curl authentication