removing basic auth