documentation: useBasicAuthorizationHeader defaults to true