basic auth fixes