pre-compute hash for basic auth