curl bypass authentication