security: fix init context for HTTP in SSPI