inject basic auth per client