fixed basic authentication (used badly formatted headers)