fixing http authentication