check that it is actually a basic auth authorization header befor trying basic auth
Merge remote-tracking branch 'origin/master' into feature/new-search-api