pass header for basic auth