httpauth not allowing post