BasicAuth is the only security model