add tests for http basic auth