Hide basic_auth in Secrets and removed redirect_loop for unauthorized users