permit reconfig of basic auth in templates