http authentication form: disabled input when checkbox is false