require http-verify

This should fix #2.