added HTTP authorization