fixed output buffer
added basic http auth extension