add basic_auth_only back