disallow http auth for partners