added check for basic auth http headers