fix http auth