fixed passing of http auth