fix mocha debug mode
"msg" -> "message"

former one created too much confusion
bugfixes for htpasswd authentication