introduced new hook to allow modifications in HTTP auth flow