switch to microhttpd and HTTP with auth