first implementation of http/ssl authentication