should be enough code for basic auth testing