http: add option to try authentication without username