Merge branch 'sc/http-late-auth'