try to get basic auth working in the browser...