basic auth is working