remove http auth, and replace with device