#569 basic auth