last_seen_api: do HTTP authentication