mention basic auth