authentication working properly, even with curl; http_server redesigned