only put Basic Auth on staging