I don't think this should be using combinedAuth, it should be using basic auth only, right?