basic auth kludge