more disabling of session with http auth