no basic auth on heartbeat