enable http basic auth via cors