fix basic auth