initial basic/digest auth