Allow API clients to use Basic Auth