not use user:pw in url to force auth dialog t appear