configuring http auth