primitive http auth workaround