it might make more sense to rename "ba" to just "basicAuth" instead, so that future devs don't have to guess what this var does (and then we can remove the comment, too)