use a newer version of apache httpclient, set options for username/pass