James,
Please post the configuration regarding your question. Let's check things as follows:
1."no ip http access-class xxx"
#you can modify it based on your security policies.
2."ip http server"
3."ip http authentication local"
4."username optimusprime privi 15 password megatron"
HTH,
Toshi