check for blank Auth header when using .htaccess copy hack, take back password stripping as we need the passwords onsite as well