support disable basic auth