catchment feed crawler sends x-auth-token instead of basic auth