fix option to turn off basic auth