http验证用户配置