fixed basic auth