test for error on unsafe use of basic auth