srrd: tested and fixed auth_check_cred() and auth_check_role(). they work now and can be used by http.c which i will change next