[Closes #27] Process basic_auth on headers, not on options.