enabling basic Auth in front of can