fixed http auth.