use the correct basic auth format user:password