server: fixed a bug where HTTP authentication was not functioning properly and could allow unauthenticated clients to download tracks.