adapted application to support http-auth-type and password-or-token config keys