rearrange auth parameters; limit curl to ipv4