Fix HttpApi state so actually uses HttApi.make_auth