add test for basic auth