Basic authorization sanitizing now keeps username, removing only the password - to see who tried to authorize.