Basic auth flow seems to work