default to using basic authentication for non-j2me secure submissions