put basic auth back in