send Authorization explicitly, not relying on HTTPBasicAuthHandler. server doesn't ask for authentication