removed http authentication