Currently http_server only support `basic` and `custom` authentication. It will be convenient to support `bearer` authentication as well.