http.c: don't rewrite the user:passwd string multiple times