dont use global state with url basic auth