http auth and headers