bugfix for thin service descriptor, http basic auth