basic auth for /vouchers