always remove Basic from Authorization header in example code