fix bug #73, http callback api support authentication in tcUrl