http authentication form works, some beauty still missing