ensure urls with http basic auth work