better check when turning off basic auth on elasticsearch