add tests to ensure http basic auth is handled correctly
document http basic auth support