support basic auth for hijacking