Auth_Basic: use of hard-coded fieldnames