160 redirect remove basic auth