http basic auth with passport session support