add SPNEGO authentication