use HttpWebRequest instead of HttpClient

Because HttpWebRequest can add more  authorization info.