trying new approach for http auth