make sure SCORM Cloud can call the LTI grade handler without basic auth