correct place to check if http auth should be installed