basic auth patch for core