remove "realm" from http auth