remove http authenticate