change to HTTP protocol with auth