removing basic auth protection