remove basic HTTP auth on dashboard index