http authentication

etc