fixed basic auth header value