hint on testing with basic auth