changes on basic auth