externalized basic auth for tests