RR: (quick fix) use basic auth for initial login