Use authority instead of basic http-auth