testing http auth route.