added virtual host based authentications