make basic auth work