move basic auth to util