change http authentication method