explicitly set basic auth headers for sexy api