options.password should not be required for basic auth