adding support for basic authentication without roles