improve httpd auth tests