removed http auth