add test that performs a body check behind HTTP basic auth