default to empty/pass. Add a helper method to implement basic authentication that child classes can use