External HTTP authentication