test httl auth