basic auth is set