[Twisted-web] new http auth stuff