basic auth but no cookie returned.