FIX: parsing order for app.http.auth
DOC: regen and update changeLog