Also moved ntlm to httputil since too http-specific to be contained in auth
Mainly required to avoid cyclical dependencies when separating other things