add hint to set basic auth for the client, too