added http auth