* take basic auth vars