Authentication http interceptor