finish basic auth, but no bearer-strategy yet