stub in basic auth handling