remove basic auth