http authentication via prompts