Add "defaults" parameter to BasicAuthSecurity's constructor

Fixes #443