http: clean up leak in init_curl_http_auth