BasicAuth vs BasicAuthSession