stop using basic auth on production