Add "defaults" parameter to BasicAuthSecurity's constructor