update basic auth env names on readme