HTTPBasicAuthService is now a filter