using http to avoid authentication errors