retab
allow optional basic auth