tests against basic authentication