fix missing return statements in BasicAuth