rename nosurf package and add wraphttpauth