Specify where auth.basic can be configured

While reading this part of the docs for the first time,
it is not obvious where that line is, especially if
someone skipped straight to HTTP Basic Authentication.